CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-21372
HighEPSS 76%

Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.

CVE-2024-21371
HighEPSS 95%

Elevation of privilege vulnerability in the Windows kernel. Allows a local attacker to gain elevated privileges.

CVE-2024-21370
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server.

CVE-2024-21369
HighEPSS 73%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit the flaw to execute code.

CVE-2024-21368
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21367
HighEPSS 74%

A vulnerability in Microsoft WDAC OLE DB provider for SQL Server allows remote code execution. An attacker could exploit this flaw to run malicious code on the server.

CVE-2024-21366
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the application using this provider.

CVE-2024-21365
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the target system.

CVE-2024-21364
Critical

A vulnerability in Microsoft Azure Site Recovery allows elevation of privilege. An attacker could exploit it to gain higher privileges in the Azure Site Recovery environment.

CVE-2024-21363
HighEPSS 53%

Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). Allows a remote attacker to execute arbitrary code.

CVE-2024-21362
Medium

A vulnerability in the Windows kernel allows security feature bypass. Technical details are not provided in the description.

CVE-2024-21361
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21360
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the service or application.

CVE-2024-21359
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21358
HighEPSS 76%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server or in the application.

CVE-2024-21357
HighEPSS 98%

Remote code execution vulnerability in Windows Pragmatic General Multicast (PGM). An attacker could exploit this flaw to execute code remotely on the system.

CVE-2024-21356
MediumEPSS 80%

Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.

CVE-2024-21355
High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.

CVE-2024-21354
High

Elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ). An attacker could exploit it to gain elevated privileges.

CVE-2024-21352
HighEPSS 74%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS