CVE Database

38893+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-49000
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48999
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48998
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48997
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48996
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48995
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48994
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-48993
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43644
7.8 HIGH

Windows Client-Side Caching Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43642
7.5 HIGH

Windows SMB Denial of Service Vulnerability

Nov 12, 2024
CVE-2024-43641
7.8 HIGH

Windows Registry Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43640
7.8 HIGH

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43636
7.8 HIGH

Win32k Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43635
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43630
7.8 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43629
7.8 HIGH

Windows DWM Core Library Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43628
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43627
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43626
7.8 HIGH

Windows Telephony Service Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43625
8.1 HIGH

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43624
8.8 HIGH

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43623
7.8 HIGH

Windows NT OS Kernel Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43622
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43621
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43620
8.8 HIGH

Windows Telephony Service Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43598
8.1 HIGH

LightGBM Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43530
7.8 HIGH

Windows Update Stack Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43499
7.5 HIGH

.NET and Visual Studio Denial of Service Vulnerability

Nov 12, 2024
CVE-2024-43462
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43459
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-43452
7.5 HIGH

Windows Registry Elevation of Privilege Vulnerability

Nov 12, 2024
CVE-2024-43450
7.5 HIGH

Windows DNS Spoofing Vulnerability

Nov 12, 2024
CVE-2024-43447
8.1 HIGH

Windows SMBv3 Server Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-38255
8.8 HIGH

SQL Server Native Client Remote Code Execution Vulnerability

Nov 12, 2024
CVE-2024-21976
8.8 HIGH

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.

Nov 12, 2024
CVE-2024-21975
8.8 HIGH

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.

Nov 12, 2024
CVE-2024-21974
8.8 HIGH

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.

Nov 12, 2024
CVE-2024-21958
7.3 HIGH

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Nov 12, 2024
CVE-2024-21957
7.3 HIGH

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Nov 12, 2024
CVE-2024-21946
7.3 HIGH

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Nov 12, 2024
CVE-2024-21945
7.3 HIGH

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code …

Nov 12, 2024
CVE-2024-21939
7.3 HIGH

Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary …

Nov 12, 2024
CVE-2024-21938
7.3 HIGH

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege …

Nov 12, 2024
CVE-2024-21937
7.3 HIGH

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Nov 12, 2024
CVE-2024-9842
7.3 HIGH

Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders.

Nov 12, 2024
CVE-2024-8539
7.1 HIGH

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.

Nov 12, 2024
CVE-2024-7571
7.8 HIGH

Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

Nov 12, 2024
CVE-2024-49528
7.8 HIGH

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the …

Nov 12, 2024
CVE-2024-49526
7.8 HIGH

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of …

Nov 12, 2024
CVE-2024-49521
7.7 HIGH

Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low …

Nov 12, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.