CVE-2024-29993

CVE-2024-29993 affects Azure CycleCloud and is an Elevation of Privilege vulnerability. Microsoft/MSRC lists this vulnerability under Azure CycleCloud with a CVSSv3 base score of 8.8 (Network, Privileges Required: Low, User Interaction: None; impacts Confidentiality, Integrity, Availability). The...

CVE-2024-29992

CVE-2024-29992: Azure Identity Library for .NET Information Disclosure Vulnerability. IBM security bulletin confirms impact on IBM Robotic Process Automation server components; fixed by updating to IBM RPA server 21.0.7.16 or higher (and 23.x line to 23.0.16+ as applicable). IBM notes the vulnera...

CVE-2024-29985

CVE-2024-29985 is a remote code execution vulnerability in Microsoft OLE DB Driver for SQL Server. Affected are the OLE DB Driver components for SQL Server; exploitation is network-based with user interaction required, as reflected in the CVSS vector. Microsoft has released security updates that ...

CVE-2024-29984

CVE-2024-29984 is a remote code execution vulnerability affecting the Microsoft OLE DB Driver for SQL Server. The issue concerns the OLE DB driver components (18.x and 19.x) and can be exploited over the network with user interaction required, per CVSS:3.1 base metrics (AV:N, AC:L, PR:N, UI:R, C:...

CVE-2024-29983

CVE-2024-29983 affects the Microsoft OLE DB Driver for SQL Server and is a remote code execution vulnerability in the OLE DB Driver components. The issue is fixed by Microsoft security updates released on 2024-04-09 (KB5036343 for SQL Server 2022 CU12, and KB5037572 describing the OLE DB Driver 1...

CVE-2024-29982

CVE-2024-29982 concerns the Microsoft OLE DB Driver for SQL Server Remote Code Execution vulnerability. Public sources describe exploitation as remote code execution via the OLE DB driver; exploitation status is not provided in the supplied documents. Affected products include Microsoft OLE DB Dr...

CVE-2024-20670

CVE-2024-20670 affects Outlook for Windows and is described as a spoofing vulnerability in the Outlook client. The vulnerability can be exploited by sending a crafted email that coerces a user to interact, potentially leaking the user’s Net-NTLMv2 credentials and enabling authentication to an att...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2024-29056

CVE-2024-29056 is a Windows authentication elevation-of-privilege issue. Public data shows a CVSSv3.1 base score of 4.3 (Medium) with a network attack vector, low attack complexity, and requiring low privileges with no user interaction. The vulnerability’s impact is listed as obtaining increased ...

CVE-2024-29055

Summary (CVE-2024-29055 | Microsoft Defender for IoT) A known elevation of privilege vulnerability in Microsoft Defender for IoT. The root cause is described as inadequate access control that could allow a remote attacker to escalate privileges within the affected software. Several sources flag t...

CVE-2024-29054

Technical details about CVE-2024-29054 are not provided in the connected documents. Available sources confirm an Elevation of Privilege vulnerability in Microsoft Defender for IoT, but do not specify affected components, root cause, versions, or fixes. Monitor for updates.

CVE-2024-29052

CVE-2024-29052 is a Windows Storage Elevation of Privilege vulnerability. Connected sources confirm an LP (local) exploit path affecting Windows storage components, with a CVSS v3.1 base vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 7.8 (HIGH). Microsoft OS updates KB5036892 (...

CVE-2024-29053

CVE-2024-29053 affects Microsoft Defender for IoT . Public sources describe a Remote Code Execution (RCE) vulnerability in Defender for IoT that can be exploited via a path traversal involved with the file-upload/update mechanism. An attacker must be authenticated and have access to the update/fi...

CVE-2024-29046

CVE-2024-29046 — Microsoft OLE DB Driver for SQL Server Remote Code Execution is a high-severity vulnerability (CVSS v3.1: 8.8) affecting the OLE DB Driver for SQL Server. The issue enables remote code execution and is exploitable via network access with user interaction required; the attack surf...

CVE-2024-29048

CVE-2024-29048 is the Microsoft OLE DB Driver for SQL Server Remote Code Execution vulnerability. The core issue concerns the OLE DB driver components allowing an attacker to execute arbitrary code, with an attack vector over the network and no privileges required, and user interaction needed. Mi...

CVE-2024-29044

CVE-2024-29044 : Microsoft OLE DB Driver for SQL Server Remote Code Execution vulnerability. Connected documentation confirms impact via the OLE DB driver component and lists a security update (KB5036335) that fixes it for SQL Server 2019 CU25, bringing product version to 15.0.4360.2 (Windows) / ...

CVE-2024-28944

CVE-2024-28944 affects Microsoft OLE DB Driver for SQL Server. The vulnerability is a Remote Code Execution issue in the OLE DB Driver components and is addressed by Microsoft security updates KB5036343 (SQL Server 2022 CU12 and related builds) and KB5037572 (OLE DB Driver 18 for SQL Server). The...

CVE-2024-28941

The CVE-2024-28941 entry covers a Remote Code Execution vulnerability in the Microsoft ODBC Driver for SQL Server. Public data confirms this affects the ODBC Driver component used to connect to SQL Server and is exploitable via network without authentication, with user interaction required per th...

CVE-2024-28943

CVE-2024-28943 : Remote Code Execution vulnerability in Microsoft ODBC Driver for SQL Server. The affected component is the ODBC driver (Microsoft ODBC Driver for SQL Server) with the vulnerability described as remote code execution. Public advisories indicate fixes are included in the latest dri...