CVE-2024-38183

CriticalCVSS 9.8

Published: 17/09/2024(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

53th percentile - higher than 53% of all known CVEs

An improper access control vulnerability in GroupMe allows an unauthenticated attacker to elevate privileges over a network.

Risk of unauthorized access to GroupMe user accounts and data, potentially leading to privacy breaches and account takeover.

Apply security updates provided by Microsoft for GroupMe. Monitor security advisories and deploy patches as soon as possible.

Original NVD description (English source)

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.