CVE-2024-21365

CVE-2024-21365 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. It has a CVSS v3.1 base score of 8.8 (High) with Network attack vector, Low attack complexity, No privileges required, and User interaction required; impacts Confidentiality, Int...

CVE-2024-21364

CVE-2024-21364 corresponds to a Microsoft Azure Site Recovery Elevation of Privilege vulnerability. Connected sources confirm the issue affects the Azure Site Recovery Configuration Server (Classic VMware/Physical to Azure scenario) and that remediation is available via updates from Microsoft. Sp...

CVE-2024-21363

Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.

CVE-2024-21362

Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2024-21359

Technical details for CVE-2024-21359 are not provided in the connected documents. The available data only references a WDAC OLE DB provider RCE vulnerability. Monitor for official advisories to learn affected products, impact, and remediation.

CVE-2024-21356

CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2024-21353

CVE-2024-21353 affects Microsoft WDAC ODBC Driver. The connected sources confirm a Remote Code Execution vulnerability in the WDAC ODBC Driver (Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability). CVSSv3.1 indicates Network access, no privileges, user interaction required, with high i...

CVE-2024-21348

Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.

CVE-2024-21346

CVE-2024-21346 is a Win32k "Elevation of Privilege" vulnerability in Windows. According to the NVD/NCSC data, it affects the Win32k component and can yield increased privileges (CVSSv3.1 base score 7.8, impact = high for confidentiality, integrity, and availability; attack vector = local; privile...

CVE-2024-21347

Technical details for CVE-2024-21347 are not provided in the connected documents. Monitor for updates and published fixes or advisories once available.

CVE-2024-21345

CVE-2024-21345 is a Windows Kernel elevation-of-privilege vulnerability exploited via a heap-based buffer overflow. The linked exploit repo presents a Windows 11 24H2 (x64) PoC chain using prefetch leakage to bypass ASLR and non-exported NT offsets to escalate privileges locally. Public exploitat...

CVE-2024-21344

CVE-2024-21344 is described as a Windows NAT Denial of Service vulnerability with CVSS v3.1 base score 5.9 (Network attack, High attack complexity, No privileges, No user interaction, Availability impact). The available connected documents do not specify affected products/versions, root cause det...

CVE-2024-21343

CVE-2024-21343 is a Windows NAT Denial of Service vulnerability. The provided documents identify it as network‑based with impact on availability (NVD CVSSv3.1: 7.5 base, HIGH; CNA: 5.9, MEDIUM) but do not provide concrete affected product versions, root cause details, exploit information, or a sp...

CVE-2024-21342

CVE-2024-21342 is a Windows DNS Client Denial of Service vulnerability. Connected sources confirm the vulnerability affects the Windows DNS Client component and can cause a denial of service (DoS). The CVSS v3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, no user inter...

CVE-2024-21341

Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.

CVE-2024-21339

Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.

CVE-2024-20684

Technical details about CVE-2024-20684 are not provided in the supplied documents. No confirmed affected products, root cause, impact, or remediation are stated. Monitor for updates from Microsoft and security feeds.

CVE-2024-20695

Technical details, affected versions, exploit methods, and remediation specifics for CVE-2024-20695 are not provided in the connected documents. Monitor vendor advisories and new public disclosures for updates.

CVE-2024-21328

The CVE-2024-21328 entry concerns a spoofing vulnerability in Microsoft Dynamics 365 on-premises, specifically affecting the Dynamics 365 Sales component. Publicly connected documents indicate the issue can enable an attacker to spoof the user interface or pretend to be another user, with indicat...