CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-21393
HighEPSS 64%

XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script into victim's browser. Attacker can steal data or hijack session.

CVE-2024-21391
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21389
HighEPSS 64%

XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script. Attacker can execute script in victim's context.

CVE-2024-21386
HighEPSS 82%

Denial of Service vulnerability in .NET. An attacker could cause a crash of applications using .NET.

CVE-2024-21384
HighEPSS 55%

Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.

CVE-2024-21380
HighEPSS 75%

A vulnerability in Microsoft Dynamics Business Central/NAV allows information disclosure. An attacker could exploit this flaw to access sensitive data.

CVE-2024-21379
HighEPSS 75%

A vulnerability in Microsoft Word allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.

CVE-2024-21378
HighEPSS 95%

Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely in the context of the user.

CVE-2024-21375
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21372
HighEPSS 76%

Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.

CVE-2024-21371
HighEPSS 95%

Elevation of privilege vulnerability in the Windows kernel. Allows a local attacker to gain elevated privileges.

CVE-2024-21370
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server.

CVE-2024-21369
HighEPSS 73%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit the flaw to execute code.

CVE-2024-21368
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21367
HighEPSS 74%

A vulnerability in Microsoft WDAC OLE DB provider for SQL Server allows remote code execution. An attacker could exploit this flaw to run malicious code on the server.

CVE-2024-21366
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the application using this provider.

CVE-2024-21365
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the target system.

CVE-2024-21363
HighEPSS 53%

Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). Allows a remote attacker to execute arbitrary code.

CVE-2024-21361
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21360
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the service or application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS