Microsoft Security Vulnerabilities

CVE-2024-38257

Microsoft AllJoyn API Information Disclosure Vulnerability

CVE-2024-38258

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

CVE-2024-38259

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-38260

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-38263

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-41879

Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-43454

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-43455

Windows Remote Desktop Licensing Service Spoofing Vulnerability

CVE-2024-43457

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVE-2024-43458

Windows Networking Information Disclosure Vulnerability

CVE-2024-43460

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-43463

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2024-43464

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-43465

Microsoft Excel Elevation of Privilege Vulnerability

CVE-2024-43466

Microsoft SharePoint Server Denial of Service Vulnerability

CVE-2024-43467

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-43469

Azure CycleCloud Remote Code Execution Vulnerability

CVE-2024-43470

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

CVE-2024-43472

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2024-43474

Microsoft SQL Server Information Disclosure Vulnerability

CVE-2024-43475

Microsoft Windows Admin Center Information Disclosure Vulnerability

CVE-2024-43476

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2024-43479

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

CVE-2024-43482

Microsoft Outlook for iOS Information Disclosure Vulnerability

CVE-2024-43487

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-43491

Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Wi...

CVE-2024-43492

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

CVE-2024-43495

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-45383

A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can e...

CVE-2024-7965

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)