CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-38240
HighEPSS 72%

Elevation of privilege vulnerability in Windows Remote Access Connection Manager. Allows an attacker to gain higher privileges on the system.

CVE-2024-38239
HighEPSS 76%

A vulnerability in Windows Kerberos allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2024-38238
HighEPSS 52%

An elevation of privilege vulnerability in the Kernel Streaming Service Driver allows an attacker to gain higher privileges.

CVE-2024-38237
HighEPSS 88%

Elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver. Allows an attacker to gain higher privileges.

CVE-2024-38236
HighEPSS 82%

Denial of Service vulnerability in DHCP Server service. An attacker could cause the DHCP service to fail.

CVE-2024-38226
HighActively exploitedEPSS 84%

Security feature bypass vulnerability in Microsoft Publisher. An attacker could exploit it to bypass security features and run unsafe content.

CVE-2024-38225
HighEPSS 69%

Elevation of privilege vulnerability in Microsoft Dynamics 365 Business Central. It allows an attacker to gain higher privileges.

CVE-2024-38216
HighEPSS 55%

Vulnerability in Azure Stack Hub allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources or administrative functions.

CVE-2024-38194
HighEPSS 67%

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

CVE-2024-38188
High

An elevation of privilege vulnerability in the Azure Network Watcher VM Agent.

CVE-2024-38119
HighEPSS 52%

A remote code execution vulnerability in Windows Network Address Translation (NAT) allows an attacker to execute code remotely.

CVE-2024-38046
High

Elevation of privilege vulnerability in PowerShell. An attacker could exploit it to gain elevated privileges on the system.

CVE-2024-38045
HighEPSS 71%

Remote code execution vulnerability in Windows TCP/IP stack. An attacker could exploit this flaw to execute code remotely.

CVE-2024-38014
HighActively exploitedEPSS 93%

Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.

CVE-2024-37980
HighEPSS 69%

Elevation of privilege vulnerability in Microsoft SQL Server. It allows an attacker to gain higher privileges on the system.

CVE-2024-37966
HighEPSS 81%

Information disclosure vulnerability in Microsoft SQL Server Native Scoring. It may allow an attacker to gain unauthorized access to data.

CVE-2024-37965
HighEPSS 75%

A vulnerability in Microsoft SQL Server allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the database.

CVE-2024-37342
HighEPSS 74%

A vulnerability in Microsoft SQL Server Native Scoring allows information disclosure. An attacker could exploit this flaw to access sensitive data.

CVE-2024-37341
HighEPSS 71%

Elevation of privilege vulnerability in Microsoft SQL Server. It allows an attacker to gain higher privileges on the system.

CVE-2024-37340
HighEPSS 74%

Remote code execution vulnerability in Microsoft SQL Server Native Scoring. An attacker could exploit this flaw to execute arbitrary code in the SQL Server service context.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS