CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-30099
High

A vulnerability in the Windows kernel allows elevation of privilege. A local attacker could exploit this flaw to gain higher privileges on the system.

CVE-2024-30097
HighEPSS 75%

A vulnerability in the Microsoft Speech Application Programming Interface (SAPI) allows remote code execution. An attacker can exploit this flaw to take control of the system without authentication.

CVE-2024-30096
MediumEPSS 57%

A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.

CVE-2024-30095
HighEPSS 59%

Remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS). Allows an unauthenticated attacker to execute arbitrary code remotely in the context of the RRAS service.

CVE-2024-30094
HighEPSS 56%

A vulnerability in Windows Routing and Remote Access Service (RRAS) allows remote code execution. An unauthenticated attacker could exploit this flaw to take control of the affected system.

CVE-2024-30093
HighEPSS 63%

A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2024-30091
HighEPSS 90%

A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.

CVE-2024-30090
HighEPSS 78%

A vulnerability in Microsoft Streaming Service allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2024-30089
HighEPSS 94%

A vulnerability in Microsoft Streaming Service allows elevation of privilege. The flaw can be exploited by a local attacker to gain higher privileges on the system.

CVE-2024-30088
HighActively exploitedEPSS 99%

A vulnerability in the Windows kernel allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.

CVE-2024-30087
HighEPSS 95%

A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.

CVE-2024-30086
HighEPSS 62%

A vulnerability in the Windows Win32 kernel subsystem allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.

CVE-2024-30085
HighEPSS 96%

A vulnerability in the Windows Cloud Files Mini Filter Driver allows elevation of privilege. The flaw stems from improper input validation, potentially enabling an attacker to execute code in kernel context.

CVE-2024-30084
HighEPSS 92%

A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.

CVE-2024-30083
HighEPSS 83%

A vulnerability in the Windows Standards-Based Storage Management Service allows a Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt the service, leading to denial of access to storage management.

CVE-2024-30082
HighEPSS 67%

A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.

CVE-2024-30080
CriticalEPSS 99%

A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) allows an attacker to execute arbitrary code remotely in the system context. The flaw exists in the message queuing mechanism and can be exploited without authentication.

CVE-2024-30078
HighEPSS 92%

A vulnerability in the Windows Wi-Fi driver allows remote code execution. An attacker can exploit this flaw by sending specially crafted network packets to a device with Wi-Fi enabled.

CVE-2024-30077
HighEPSS 76%

A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.

CVE-2024-30076
MediumEPSS 75%

A vulnerability in the Windows Container Manager Service allows elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS