CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-21351
HighActively exploitedEPSS 98%

A security feature bypass vulnerability in Windows SmartScreen.

CVE-2024-21350
HighEPSS 72%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code on the system.

CVE-2024-21349
HighEPSS 74%

Remote code execution vulnerability in Microsoft ActiveX Data Objects. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2024-21348
HighEPSS 81%

Denial of Service vulnerability in Internet Connection Sharing (ICS). An attacker could exploit this flaw to cause a service crash.

CVE-2024-21347
HighEPSS 69%

Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.

CVE-2024-21346
HighEPSS 90%

Elevation of privilege vulnerability in the Win32k driver. It could allow an attacker to gain administrator privileges.

CVE-2024-21344
MediumEPSS 75%

A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.

CVE-2024-21343
MediumEPSS 77%

Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.

CVE-2024-21341
MediumEPSS 58%

Remote code execution vulnerability in the Windows kernel. Allows an attacker to execute code with elevated privileges.

CVE-2024-21340
MediumEPSS 52%

Information disclosure vulnerability in the Windows kernel. It may allow an attacker to access data that should be protected.

CVE-2024-21339
Medium

A vulnerability in the Windows USB Generic Parent Driver allows remote code execution.

CVE-2024-21338
HighActively exploitedEPSS 99%

Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.

CVE-2024-21329
HighEPSS 62%

Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2024-21328
HighEPSS 68%

Spoofing vulnerability in Dynamics 365 Sales. An attacker could impersonate another user or system, potentially leading to unauthorized access or data manipulation.

CVE-2024-21327
HighEPSS 67%

Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Engagement. Allows an attacker to inject malicious script into the victim's browser.

CVE-2024-21315
High

Elevation of privilege vulnerability in Microsoft Defender for Endpoint Protection. An attacker could exploit it to gain elevated privileges.

CVE-2024-21304
Medium

A vulnerability in Trusted Compute Base allows elevation of privilege. Technical details are not provided in the description.

CVE-2024-20695
Medium

A vulnerability in Skype for Business allows information disclosure.

CVE-2024-20684
MediumEPSS 60%

Denial of Service vulnerability in Windows Hyper-V. An attacker can cause failure or unavailability of virtualization services.

CVE-2024-20679
MediumEPSS 68%

A spoofing vulnerability in Azure Stack Hub allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS