CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-21359
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21358
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server or in the application.

CVE-2024-21357
HighEPSS 98%

Remote code execution vulnerability in Windows Pragmatic General Multicast (PGM). An attacker could exploit this flaw to execute code remotely on the system.

CVE-2024-21355
High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.

CVE-2024-21354
High

Elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ). An attacker could exploit it to gain elevated privileges.

CVE-2024-21352
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21351
HighActively exploitedEPSS 98%

A security feature bypass vulnerability in Windows SmartScreen.

CVE-2024-21350
HighEPSS 72%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code on the system.

CVE-2024-21349
HighEPSS 74%

Remote code execution vulnerability in Microsoft ActiveX Data Objects. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21348
HighEPSS 81%

Denial of Service vulnerability in Internet Connection Sharing (ICS). An attacker could exploit this flaw to cause a service crash.

CVE-2024-21347
HighEPSS 69%

Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.

CVE-2024-21346
HighEPSS 90%

Elevation of privilege vulnerability in the Win32k driver. It could allow an attacker to gain administrator privileges.

CVE-2024-21338
HighActively exploitedEPSS 99%

Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.

CVE-2024-21329
HighEPSS 62%

Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2024-21328
HighEPSS 68%

Spoofing vulnerability in Dynamics 365 Sales. An attacker could impersonate another user or system, potentially leading to unauthorized access or data manipulation.

CVE-2024-21327
HighEPSS 67%

Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Engagement. Allows an attacker to inject malicious script into the victim's browser.

CVE-2024-21315
High

Elevation of privilege vulnerability in Microsoft Defender for Endpoint Protection. An attacker could exploit it to gain elevated privileges.

CVE-2024-20673
HighEPSS 65%

A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or files that the user opens.

CVE-2024-20667
HighEPSS 69%

Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.

CVE-2024-23512
High

Podatność CVE-2024-23512 dotyczy deserializacji niezaufanych danych w produkcie ProductX – WooCommerce Builder oraz blokach Gutenberg WooCommerce. Problem ten występuje w wersjach od n/a do 3.1.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS