# Vulnerabilities published in 2024


- [CVE-2024-49084](https://insights.sbomify.com/CVE-2024-49084/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-49083](https://insights.sbomify.com/CVE-2024-49083/): Windows Mobile Broadband Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2024-49082](https://insights.sbomify.com/CVE-2024-49082/): Windows File Explorer Information Disclosure Vulnerability (medium 6.8)
- [CVE-2024-49081](https://insights.sbomify.com/CVE-2024-49081/): Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2024-49080](https://insights.sbomify.com/CVE-2024-49080/): Windows IP Routing Management Snapin Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-4908](https://insights.sbomify.com/CVE-2024-4908/): Campcodes Complete Web-Based School Management System student_attendance_history1.php sql injection (medium 5.3)
- [CVE-2024-49079](https://insights.sbomify.com/CVE-2024-49079/): Input Method Editor (IME) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49078](https://insights.sbomify.com/CVE-2024-49078/): Windows Mobile Broadband Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2024-49077](https://insights.sbomify.com/CVE-2024-49077/): Windows Mobile Broadband Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2024-49076](https://insights.sbomify.com/CVE-2024-49076/): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49075](https://insights.sbomify.com/CVE-2024-49075/): Windows Remote Desktop Services Denial of Service Vulnerability (high 7.5)
- [CVE-2024-49074](https://insights.sbomify.com/CVE-2024-49074/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49073](https://insights.sbomify.com/CVE-2024-49073/): Windows Mobile Broadband Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2024-49072](https://insights.sbomify.com/CVE-2024-49072/): Windows Task Scheduler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49071](https://insights.sbomify.com/CVE-2024-49071/): Windows Defender Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-49070](https://insights.sbomify.com/CVE-2024-49070/): Microsoft SharePoint Remote Code Execution Vulnerability (high 7.4)
- [CVE-2024-4907](https://insights.sbomify.com/CVE-2024-4907/): Campcodes Complete Web-Based School Management System show_student2.php sql injection (medium 5.3)
- [CVE-2024-49069](https://insights.sbomify.com/CVE-2024-49069/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49068](https://insights.sbomify.com/CVE-2024-49068/): Microsoft SharePoint Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2024-49065](https://insights.sbomify.com/CVE-2024-49065/): Microsoft Office Remote Code Execution Vulnerability (medium 5.5)
- [CVE-2024-49064](https://insights.sbomify.com/CVE-2024-49064/): Microsoft SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-49063](https://insights.sbomify.com/CVE-2024-49063/): Microsoft/Muzic Remote Code Execution Vulnerability (high 8.4)
- [CVE-2024-49062](https://insights.sbomify.com/CVE-2024-49062/): Microsoft SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-49060](https://insights.sbomify.com/CVE-2024-49060/): Azure Stack HCI Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-4906](https://insights.sbomify.com/CVE-2024-4906/): Campcodes Complete Web-Based School Management System show_student1.php sql injection (medium 5.3)
- [CVE-2024-49059](https://insights.sbomify.com/CVE-2024-49059/): Microsoft Office Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-49057](https://insights.sbomify.com/CVE-2024-49057/): Microsoft Defender for Endpoint on Android Spoofing Vulnerability (high 8.1)
- [CVE-2024-49056](https://insights.sbomify.com/CVE-2024-49056/): Airlift.microsoft.com Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-49054](https://insights.sbomify.com/CVE-2024-49054/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2024-49053](https://insights.sbomify.com/CVE-2024-49053/): Microsoft Dynamics 365 Sales Spoofing Vulnerability (high 7.6)
- [CVE-2024-49052](https://insights.sbomify.com/CVE-2024-49052/): Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2024-49051](https://insights.sbomify.com/CVE-2024-49051/): Microsoft PC Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49050](https://insights.sbomify.com/CVE-2024-49050/): Visual Studio Code Python Extension Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-4905](https://insights.sbomify.com/CVE-2024-4905/): Kashipara College Management System view_students_each_detail.php sql injection (medium 5.3)
- [CVE-2024-49049](https://insights.sbomify.com/CVE-2024-49049/): Visual Studio Code Remote Extension Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2024-49048](https://insights.sbomify.com/CVE-2024-49048/): TorchGeo Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-49046](https://insights.sbomify.com/CVE-2024-49046/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49044](https://insights.sbomify.com/CVE-2024-49044/): Visual Studio Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2024-49043](https://insights.sbomify.com/CVE-2024-49043/): Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49042](https://insights.sbomify.com/CVE-2024-49042/): Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2024-49041](https://insights.sbomify.com/CVE-2024-49041/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2024-49040](https://insights.sbomify.com/CVE-2024-49040/): Microsoft Exchange Server Spoofing Vulnerability (high 7.5)
- [CVE-2024-4904](https://insights.sbomify.com/CVE-2024-4904/): Byzoro Smart S200 Management Platform userattestation.php unrestricted upload (medium 5.3)
- [CVE-2024-49039](https://insights.sbomify.com/CVE-2024-49039/): Microsoft Windows Task Scheduler Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2024-49038](https://insights.sbomify.com/CVE-2024-49038/): Microsoft Copilot Studio Elevation Of Privilege Vulnerability (critical 9.3)
- [CVE-2024-49035](https://insights.sbomify.com/CVE-2024-49035/): Microsoft Partner Center Improper Access Control (high 8.7, exploited in the wild)
- [CVE-2024-49033](https://insights.sbomify.com/CVE-2024-49033/): Microsoft Word Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2024-49032](https://insights.sbomify.com/CVE-2024-49032/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49031](https://insights.sbomify.com/CVE-2024-49031/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49030](https://insights.sbomify.com/CVE-2024-49030/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-4903](https://insights.sbomify.com/CVE-2024-4903/): Tongda OA delete.php sql injection (medium 5.3)
- [CVE-2024-49029](https://insights.sbomify.com/CVE-2024-49029/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49028](https://insights.sbomify.com/CVE-2024-49028/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49027](https://insights.sbomify.com/CVE-2024-49027/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49026](https://insights.sbomify.com/CVE-2024-49026/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-49025](https://insights.sbomify.com/CVE-2024-49025/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 5.4)
- [CVE-2024-49023](https://insights.sbomify.com/CVE-2024-49023/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 5.9)
- [CVE-2024-49021](https://insights.sbomify.com/CVE-2024-49021/): Microsoft SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-4902](https://insights.sbomify.com/CVE-2024-4902/): Tutor LMS – eLearning and online course solution <= 2.7.1 -Authenticated (Administrator+) SQL Injection (high 7.2)
- [CVE-2024-49019](https://insights.sbomify.com/CVE-2024-49019/): Active Directory Certificate Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-49018](https://insights.sbomify.com/CVE-2024-49018/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49017](https://insights.sbomify.com/CVE-2024-49017/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49016](https://insights.sbomify.com/CVE-2024-49016/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49015](https://insights.sbomify.com/CVE-2024-49015/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49014](https://insights.sbomify.com/CVE-2024-49014/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49013](https://insights.sbomify.com/CVE-2024-49013/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49012](https://insights.sbomify.com/CVE-2024-49012/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49011](https://insights.sbomify.com/CVE-2024-49011/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49010](https://insights.sbomify.com/CVE-2024-49010/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-4901](https://insights.sbomify.com/CVE-2024-4901/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 8.7)
- [CVE-2024-49009](https://insights.sbomify.com/CVE-2024-49009/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49008](https://insights.sbomify.com/CVE-2024-49008/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49007](https://insights.sbomify.com/CVE-2024-49007/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49006](https://insights.sbomify.com/CVE-2024-49006/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49005](https://insights.sbomify.com/CVE-2024-49005/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49004](https://insights.sbomify.com/CVE-2024-49004/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49003](https://insights.sbomify.com/CVE-2024-49003/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49002](https://insights.sbomify.com/CVE-2024-49002/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49001](https://insights.sbomify.com/CVE-2024-49001/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-49000](https://insights.sbomify.com/CVE-2024-49000/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-4900](https://insights.sbomify.com/CVE-2024-4900/): SEOPress < 7.8 - Contributor+ Open Redirect (medium 6.1)
- [CVE-2024-48999](https://insights.sbomify.com/CVE-2024-48999/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48998](https://insights.sbomify.com/CVE-2024-48998/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48997](https://insights.sbomify.com/CVE-2024-48997/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48996](https://insights.sbomify.com/CVE-2024-48996/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48995](https://insights.sbomify.com/CVE-2024-48995/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48994](https://insights.sbomify.com/CVE-2024-48994/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48993](https://insights.sbomify.com/CVE-2024-48993/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-48992](https://insights.sbomify.com/CVE-2024-48992/): Privilege escalation in needrestart (high 7.8)
- [CVE-2024-48991](https://insights.sbomify.com/CVE-2024-48991/): Race condition in needrestart (high 7.8)
- [CVE-2024-48990](https://insights.sbomify.com/CVE-2024-48990/): Privilege escalation in needrestart (high 7.8)
- [CVE-2024-4899](https://insights.sbomify.com/CVE-2024-4899/): SEOPress < 7.8 - Contributor+ Stored XSS (medium 5.0)
- [CVE-2024-48989](https://insights.sbomify.com/CVE-2024-48989/): Denial of service in IndraDrive FWA-INDRV*-MP* (high 7.5)
- [CVE-2024-48988](https://insights.sbomify.com/CVE-2024-48988/): Apache StreamPark: SQL injection vulnerability (high 7.6)
- [CVE-2024-48987](https://insights.sbomify.com/CVE-2024-48987/): Snipe-IT remote code execution (medium 6.6)
- [CVE-2024-48986](https://insights.sbomify.com/CVE-2024-48986/): Memory corruption in arm:mbed (high 7.5)
- [CVE-2024-48985](https://insights.sbomify.com/CVE-2024-48985/): Memory corruption in arm:mbed (high 7.5)
- [CVE-2024-48984](https://insights.sbomify.com/CVE-2024-48984/): Memory corruption in arm:mbed os (critical 9.8)
- [CVE-2024-48983](https://insights.sbomify.com/CVE-2024-48983/): Integer overflow in arm:mbed (high 7.5)
- [CVE-2024-48982](https://insights.sbomify.com/CVE-2024-48982/): Memory corruption in arm:mbed (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/241/