# Vulnerabilities published in 2024 - [CVE-2024-43625](https://insights.sbomify.com/CVE-2024-43625/): Microsoft Windows VMSwitch Elevation of Privilege Vulnerability (high 8.1) - [CVE-2024-43624](https://insights.sbomify.com/CVE-2024-43624/): Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability (high 8.8) - [CVE-2024-43623](https://insights.sbomify.com/CVE-2024-43623/): Windows NT OS Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43622](https://insights.sbomify.com/CVE-2024-43622/): Windows Telephony Service Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43621](https://insights.sbomify.com/CVE-2024-43621/): Windows Telephony Service Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43620](https://insights.sbomify.com/CVE-2024-43620/): Windows Telephony Service Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-4362](https://insights.sbomify.com/CVE-2024-4362/): Cross-site scripting in SiteOrigin Widgets Bundle (medium 6.4) - [CVE-2024-43616](https://insights.sbomify.com/CVE-2024-43616/): Microsoft Office Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-43615](https://insights.sbomify.com/CVE-2024-43615/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 7.1) - [CVE-2024-43614](https://insights.sbomify.com/CVE-2024-43614/): Microsoft Defender for Endpoint for Linux Spoofing Vulnerability (medium 5.5) - [CVE-2024-43613](https://insights.sbomify.com/CVE-2024-43613/): Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability (high 7.2) - [CVE-2024-43612](https://insights.sbomify.com/CVE-2024-43612/): Power BI Report Server Spoofing Vulnerability (medium 6.9) - [CVE-2024-43611](https://insights.sbomify.com/CVE-2024-43611/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43610](https://insights.sbomify.com/CVE-2024-43610/): Copilot Studio Information Disclosure Vulnerability (high 7.4) - [CVE-2024-4361](https://insights.sbomify.com/CVE-2024-4361/): Cross-site scripting in Page Builder by SiteOrigin (medium 6.4) - [CVE-2024-43609](https://insights.sbomify.com/CVE-2024-43609/): Microsoft Office Spoofing Vulnerability (medium 6.5) - [CVE-2024-43608](https://insights.sbomify.com/CVE-2024-43608/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43607](https://insights.sbomify.com/CVE-2024-43607/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43604](https://insights.sbomify.com/CVE-2024-43604/): Outlook for Android Elevation of Privilege Vulnerability (medium 5.7) - [CVE-2024-43603](https://insights.sbomify.com/CVE-2024-43603/): Visual Studio Collector Service Denial of Service Vulnerability (medium 5.5) - [CVE-2024-43602](https://insights.sbomify.com/CVE-2024-43602/): Azure CycleCloud Remote Code Execution Vulnerability (critical 9.9) - [CVE-2024-43601](https://insights.sbomify.com/CVE-2024-43601/): Visual Studio Code for Linux Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-43600](https://insights.sbomify.com/CVE-2024-43600/): Microsoft Office Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-4360](https://insights.sbomify.com/CVE-2024-4360/): Cross-site scripting in Element Pack – Widgets, Templates & Addons for Elementor (medium 6.4) - [CVE-2024-43599](https://insights.sbomify.com/CVE-2024-43599/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43598](https://insights.sbomify.com/CVE-2024-43598/): LightGBM Remote Code Execution Vulnerability (high 8.1) - [CVE-2024-43596](https://insights.sbomify.com/CVE-2024-43596/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 6.5) - [CVE-2024-43595](https://insights.sbomify.com/CVE-2024-43595/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 6.5) - [CVE-2024-43594](https://insights.sbomify.com/CVE-2024-43594/): Microsoft System Center Elevation of Privilege Vulnerability (high 7.3) - [CVE-2024-43593](https://insights.sbomify.com/CVE-2024-43593/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43592](https://insights.sbomify.com/CVE-2024-43592/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43591](https://insights.sbomify.com/CVE-2024-43591/): Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability (high 8.7) - [CVE-2024-43590](https://insights.sbomify.com/CVE-2024-43590/): Visual C++ Redistributable Installer Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-4359](https://insights.sbomify.com/CVE-2024-4359/): Path traversal in Element Pack – Widgets, Templates & Addons for Elementor (medium 6.5) - [CVE-2024-43589](https://insights.sbomify.com/CVE-2024-43589/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43587](https://insights.sbomify.com/CVE-2024-43587/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 5.9) - [CVE-2024-43585](https://insights.sbomify.com/CVE-2024-43585/): Code Integrity Guard Security Feature Bypass Vulnerability (medium 5.5) - [CVE-2024-43584](https://insights.sbomify.com/CVE-2024-43584/): Windows Scripting Engine Security Feature Bypass Vulnerability (high 7.7) - [CVE-2024-43583](https://insights.sbomify.com/CVE-2024-43583/): Winlogon Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43582](https://insights.sbomify.com/CVE-2024-43582/): Remote Desktop Protocol Server Remote Code Execution Vulnerability (high 8.1) - [CVE-2024-43581](https://insights.sbomify.com/CVE-2024-43581/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 7.1) - [CVE-2024-43580](https://insights.sbomify.com/CVE-2024-43580/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 5.4) - [CVE-2024-4358](https://insights.sbomify.com/CVE-2024-4358/): Progress Telerik Report Server Authentication Bypass by Spoofing (critical 9.8, exploited in the wild) - [CVE-2024-43579](https://insights.sbomify.com/CVE-2024-43579/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.6) - [CVE-2024-43578](https://insights.sbomify.com/CVE-2024-43578/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.6) - [CVE-2024-43577](https://insights.sbomify.com/CVE-2024-43577/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3) - [CVE-2024-43576](https://insights.sbomify.com/CVE-2024-43576/): Microsoft Office Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-43575](https://insights.sbomify.com/CVE-2024-43575/): Windows Hyper-V Denial of Service Vulnerability (high 7.5) - [CVE-2024-43574](https://insights.sbomify.com/CVE-2024-43574/): Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability (high 8.3) - [CVE-2024-43573](https://insights.sbomify.com/CVE-2024-43573/): Microsoft Windows MSHTML Platform Spoofing (medium 6.5, exploited in the wild) - [CVE-2024-43572](https://insights.sbomify.com/CVE-2024-43572/): Microsoft Windows Management Console Remote Code Execution (high 7.8, exploited in the wild) - [CVE-2024-43571](https://insights.sbomify.com/CVE-2024-43571/): Sudo for Windows Spoofing Vulnerability (medium 5.6) - [CVE-2024-43570](https://insights.sbomify.com/CVE-2024-43570/): Windows Kernel Elevation of Privilege Vulnerability (medium 6.4) - [CVE-2024-4357](https://insights.sbomify.com/CVE-2024-4357/): XML External Entity Processing Information Disclosure (medium 6.5) - [CVE-2024-43567](https://insights.sbomify.com/CVE-2024-43567/): Windows Hyper-V Denial of Service Vulnerability (high 7.5) - [CVE-2024-43566](https://insights.sbomify.com/CVE-2024-43566/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.5) - [CVE-2024-43565](https://insights.sbomify.com/CVE-2024-43565/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5) - [CVE-2024-43564](https://insights.sbomify.com/CVE-2024-43564/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43563](https://insights.sbomify.com/CVE-2024-43563/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43562](https://insights.sbomify.com/CVE-2024-43562/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5) - [CVE-2024-43561](https://insights.sbomify.com/CVE-2024-43561/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43560](https://insights.sbomify.com/CVE-2024-43560/): Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-4356](https://insights.sbomify.com/CVE-2024-4356/): List categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4) - [CVE-2024-43559](https://insights.sbomify.com/CVE-2024-43559/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43558](https://insights.sbomify.com/CVE-2024-43558/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43557](https://insights.sbomify.com/CVE-2024-43557/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43556](https://insights.sbomify.com/CVE-2024-43556/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43555](https://insights.sbomify.com/CVE-2024-43555/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43554](https://insights.sbomify.com/CVE-2024-43554/): Windows Kernel-Mode Driver Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-43553](https://insights.sbomify.com/CVE-2024-43553/): NT OS Kernel Elevation of Privilege Vulnerability (high 7.4) - [CVE-2024-43552](https://insights.sbomify.com/CVE-2024-43552/): Windows Shell Remote Code Execution Vulnerability (high 7.3) - [CVE-2024-43551](https://insights.sbomify.com/CVE-2024-43551/): Windows Storage Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43550](https://insights.sbomify.com/CVE-2024-43550/): Windows Secure Channel Spoofing Vulnerability (high 7.4) - [CVE-2024-4355](https://insights.sbomify.com/CVE-2024-4355/): Missing authorization in Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection (medium 4.3) - [CVE-2024-43549](https://insights.sbomify.com/CVE-2024-43549/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43547](https://insights.sbomify.com/CVE-2024-43547/): Windows Kerberos Information Disclosure Vulnerability (medium 6.5) - [CVE-2024-43546](https://insights.sbomify.com/CVE-2024-43546/): Windows Cryptographic Information Disclosure Vulnerability (medium 5.6) - [CVE-2024-43545](https://insights.sbomify.com/CVE-2024-43545/): Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability (high 7.5) - [CVE-2024-43544](https://insights.sbomify.com/CVE-2024-43544/): Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability (high 7.5) - [CVE-2024-43543](https://insights.sbomify.com/CVE-2024-43543/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) - [CVE-2024-43542](https://insights.sbomify.com/CVE-2024-43542/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43541](https://insights.sbomify.com/CVE-2024-43541/): Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability (high 7.5) - [CVE-2024-43540](https://insights.sbomify.com/CVE-2024-43540/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-4354](https://insights.sbomify.com/CVE-2024-4354/): TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind (medium 6.4) - [CVE-2024-43538](https://insights.sbomify.com/CVE-2024-43538/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43537](https://insights.sbomify.com/CVE-2024-43537/): Windows Mobile Broadband Driver Denial of Service Vulnerability (medium 6.5) - [CVE-2024-43536](https://insights.sbomify.com/CVE-2024-43536/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) - [CVE-2024-43535](https://insights.sbomify.com/CVE-2024-43535/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.0) - [CVE-2024-43534](https://insights.sbomify.com/CVE-2024-43534/): Windows Graphics Component Information Disclosure Vulnerability (medium 6.5) - [CVE-2024-43533](https://insights.sbomify.com/CVE-2024-43533/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-43532](https://insights.sbomify.com/CVE-2024-43532/): Remote Registry Service Elevation of Privilege Vulnerability (high 8.8) - [CVE-2024-43530](https://insights.sbomify.com/CVE-2024-43530/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-4353](https://insights.sbomify.com/CVE-2024-4353/): Stored XSS in Generate Board Name Input Field (medium 4.6) - [CVE-2024-43529](https://insights.sbomify.com/CVE-2024-43529/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.3) - [CVE-2024-43528](https://insights.sbomify.com/CVE-2024-43528/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43527](https://insights.sbomify.com/CVE-2024-43527/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-43526](https://insights.sbomify.com/CVE-2024-43526/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) - [CVE-2024-43525](https://insights.sbomify.com/CVE-2024-43525/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) - [CVE-2024-43524](https://insights.sbomify.com/CVE-2024-43524/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) - [CVE-2024-43523](https://insights.sbomify.com/CVE-2024-43523/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/281/