231584 matches found
CVE-2024-21315
Technical details for CVE-2024-21315 are not provided in the supplied documents. No affected products/versions, root cause, exploitability, or mitigations are specified here; monitor for updates.
CVE-2024-20679
CVE-2024-20679 is a spoofing vulnerability in Microsoft Azure Stack Hub. The connected sources indicate the affected product is Azure Stack Hub, with the vulnerability enabling impersonation (spoofing) of a user interface, without remote code execution. Microsoft’s lifecycle advisory groups this ...
CVE-2024-21304
Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.
CVE-2024-20673
CVE-2024-20673 is a Microsoft Office remote code execution vulnerability tracked across multiple office-product advisories. Public docs show high-severity risk (CVSS v3.1: 7.8), with exploitation described as a remote code execution requiring local access and user interaction in some vectors. Con...
CVE-2024-21420
Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.
CVE-2024-21413
Summary of CVE-2024-21413 (Microsoft Outlook / Moniker Link): A vulnerability in Outlook where crafted Moniker Link URLs (often via file:///UNC paths) can trigger an automatic SMB access, potentially leaking the user’s NTLM hash to an attacker. Multiple PoCs on GitHub demonstrate delivering malic...
CVE-2024-21404
CVE-2024-21404 is a .NET Denial of Service vulnerability (CVSS 3.1: 7.5) with network-based vector and high availability impact. Connected advisories attribute the DoS to components in .NET such as SignalR server and X509Certificate2, and indicate exploitation is possible in affected .NET runtime...
CVE-2024-21402
CVE-2024-21402 is a Microsoft Outlook Elevation of Privilege vulnerability. The CVE affects Outlook as part of Microsoft Office/365 suites and is triggered locally, enabling a low-privileged user to escalate to higher privileges on the affected system. The base CVSSv3.1 score is 7.1 (HIGH) with P...
CVE-2024-21401
The CVE-2024-21401 entry concerns Microsoft Entra Jira Single-Sign-On Plugin. Connected PT-2024-1867 indicates the vulnerability involves insufficient access restrictions, allowing a remote attacker to elevate privileges. The PTSecurity note explicitly says affected versions are not specified and...
CVE-2024-21396
CVE-2024-21396 is a spoofing vulnerability in Microsoft Dynamics 365 Sales (on‑premises), enabling pre‑authentication user spoofing. Multiple sources (NCSC mapping, Nessus plugin) describe a network‑accessible issue with high impact on confidentiality and a required user interaction for exploitat...
CVE-2024-21393
CVE-2024-21393 is a Microsoft Dynamics 365 (on-premises) Cross-site Scripting (XSS) vulnerability. The CVSSv3.1 vector indicates NETWORK attack vector, LOW attack complexity, LOW privileges required, user interaction is REQUIRED, and the impact on confidentiality is HIGH with no availability impa...
CVE-2024-21394
CVE-2024-21394 is a spoofing vulnerability in Microsoft Dynamics 365 Field Service (on-premises) where an attacker can remotely spoof the user interface. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, but user interaction is needed, with confidential...
CVE-2024-21389
CVE-2024-21389 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The incident affects the on‑premises deployment (noted in multiple sources) and is classified with CVSSv3.1 base score 7.6 (HIGH) with network access, low attack complexity, user interaction required, ...
CVE-2024-21386
CVE-2024-21386 is a Denial of Service vulnerability in ASP.NET SignalR affecting .NET runtimes across 6.0/7.0/8.0. The issue affects ASP.NET Core implementations using SignalR and is mitigated by updating to patched runtimes: .NET 6.0.27, 7.0.16, and 8.0.2 (with affected package entries listed in...
CVE-2024-21381
The connected source (NCSC advisory) confirms CVE-2024-21381 affects Microsoft Azure Active Directory B2C and is categorized as a spoofing vulnerability with the practical impact described as “Pretend to be another user.” The advisory lists it under Azure Active Directory vulnerabilities with a C...
CVE-2024-21379
CVE-2024-21379 is a Microsoft Word remote code execution vulnerability. The entry concerns Word (notably Word 2016) and is documented with a CVSS v3.1 base score of 7.8 (High) with a local attack vector, low attack complexity, and requiring user interaction; impact is high on confidentiality, int...
CVE-2024-21375
Technical details for CVE-2024-21375 are not publicly available in the provided documents. Monitor for updates as more information may be published.
CVE-2024-21372
Technical details for CVE-2024-21372 are not publicly available in the provided documents. The connected items only reference the CVE among broader Windows vulnerability listings; no affected product/version, root cause, impact, or fixes are stated.
CVE-2024-21371
Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.