CVE-2024-21435

CVE-2024-21435 – Windows OLE Remote Code Execution is discussed in the connected Krebs analysis as being exploitable by tricking a user into opening a document, which then causes the OLE engine to download a malicious DLL and execute code. The entry lists an 8.8 CVSS (HIGH) with NETWORK attack ve...

CVE-2024-21434

Technical details about CVE-2024-21434 are not provided in the supplied documents. Monitor for updates from Microsoft and security feeds for affected components, root cause, impact, and fixes.

CVE-2024-21432

Technical details about CVE-2024-21432 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation guidance.

CVE-2024-21433

Technical details for CVE-2024-21433 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-21431

CVE-2024-21431 is a Microsoft Windows vulnerability titled “Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability.” Connected sources identify this as a local, high-severity issue affecting the HVCI mechanism, with a CVSS score in the high range (confidentiality, integr...

CVE-2024-21427

CVE-2024-21427 is a Windows Kerberos Security Feature Bypass vulnerability. The CVSSv3.1 base score is 7.5 (High): Vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network exploitation with high impact to confidentiality, integrity, and availability. The attack vector is network, requiring ...

CVE-2024-21419

Microsoft Dynamics 365 (on-premises) 9.1 is affected by a Cross-site Scripting (XSS) vulnerability (CVE-2024-21419). The issue concerns the web UI and a vulnerability in the product’s handling of input that can spoof UI and potentially affect confidentiality/integrity. CVSS details from sources: ...

CVE-2024-21407

CVE-2024-21407 is a Windows Hyper-V Remote Code Execution vulnerability tied to the Hyper-V component. Exploitation requires an authenticated attacker on a guest to send specially crafted file operation requests to hardware resources on the VM, which could lead to remote code execution on the hos...

CVE-2024-21408

Microsoft’s CVE-2024-21408 is a Windows Hyper-V Denial of Service vulnerability that can be triggered by a guest to cause a host crash. The available connected sources confirm Hyper-V as the affected product, the host compromise from a guest as the attack scenario, and a DoS impact. The CVSS vect...

CVE-2024-21390

CVE-2024-21390 concerns a local elevation-of-privilege in the Microsoft Authenticator app. The available sources consistently identify the affected software as the Microsoft Authenticator (MSA) mobile app and describe an attacker needing prior access on the device to exploit the issue. Microsoft’...

CVE-2024-21400

CVE-2024-21400 targets Azure Kubernetes Service Confidential Containers. Connected sources confirm a privilege-escalation flaw due to insufficient access controls in deployment/management of confidential containers, enabling remote attackers to gain elevated privileges within affected AKS environ...

CVE-2024-21334

CVE-2024-21334 is an Open Management Infrastructure (OMI) remote code execution vulnerability affecting Microsoft System Center Operations Manager (SCOM) environments that use OMI. Public sources indicate OMI under SCOM versions 2019 and 2022 can be exploited remotely via unauthenticated requests...

CVE-2024-21330

CVE-2024-21330 describes an elevation-of-privilege vulnerability in Microsoft’s Open Management Infrastructure (OMI). Public sources indicate this affects OMI alongside related System Center/OMS components, allowing an attacker with local access to obtain elevated privileges. The impact is descri...

CVE-2024-26164

The CVE-2024-26164 entry concerns the Microsoft Django Backend for SQL Server, described as a Remote Code Execution vulnerability. The connected sources confirm this affects the SQL Server backend used with Django and indicate an attacker could trigger arbitrary code execution via network access,...

CVE-2024-26161

CVE-2024-26161 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and NONE privileges required, but user interaction is REQ...

CVE-2024-26203

CVE-2024-26203 affects Microsoft Azure Data Studio prior to 1.48.0. The vulnerability is an elevation of privilege in Azure Data Studio, with a local attack vector, required user interaction, and potential to obtain higher privileges (CVE-2024-26203). Public exploits exist per related advisories....

CVE-2024-26199

CVE-2024-26199 is an Office elevation-of-privilege vulnerability affecting Microsoft Office products (notably Office in Office 365/Click-to-Run and related Office components). Descriptions in multiple sources indicate a privilege-escalation flaw that could grant SYSTEM-level privileges; CVSSv3.1 ...

CVE-2024-26201

CVE-2024-26201 affects Microsoft Intune Linux Agent and is an Elevation of Privilege vulnerability caused by insufficient access restrictions. Affects unspecified Intune Linux Agent versions per PT-2024-2254; there is no publicly documented fix version in the provided sources. The CVSSv3 base sco...

CVE-2024-26198

CVE-2024-26198 is a Microsoft Exchange Server Remote Code Execution vulnerability. Connected sources confirm exploitation context as a March 2024 issue with public patches released (e.g., KB5037224 for Exchange Server 2019 CU14 HU2 and CU13 HU6) and accompanying March 2024 security updates. The N...

CVE-2024-26190

CVE-2024-26190 : Microsoft QUIC (MsQuic) server component is affected by a denial-of-service vulnerability caused by a memory leak that can be triggered by multiple decodes, leading to memory exhaustion. The entry’s CVSSv3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, ...