# Vulnerabilities published in 2024 - [CVE-2024-38264](https://insights.sbomify.com/CVE-2024-38264/): Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability (medium 5.9) - [CVE-2024-38263](https://insights.sbomify.com/CVE-2024-38263/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (high 7.5) - [CVE-2024-38262](https://insights.sbomify.com/CVE-2024-38262/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (high 7.5) - [CVE-2024-38261](https://insights.sbomify.com/CVE-2024-38261/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-38260](https://insights.sbomify.com/CVE-2024-38260/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-3826](https://insights.sbomify.com/CVE-2024-3826/): Broken SAML Validation (high 8.6) - [CVE-2024-38259](https://insights.sbomify.com/CVE-2024-38259/): Microsoft Management Console Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-38258](https://insights.sbomify.com/CVE-2024-38258/): Windows Remote Desktop Licensing Service Information Disclosure Vulnerability (medium 6.5) - [CVE-2024-38257](https://insights.sbomify.com/CVE-2024-38257/): Microsoft AllJoyn API Information Disclosure Vulnerability (high 7.5) - [CVE-2024-38256](https://insights.sbomify.com/CVE-2024-38256/): Windows Kernel-Mode Driver Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-38255](https://insights.sbomify.com/CVE-2024-38255/): SQL Server Native Client Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-38254](https://insights.sbomify.com/CVE-2024-38254/): Windows Authentication Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-38253](https://insights.sbomify.com/CVE-2024-38253/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38252](https://insights.sbomify.com/CVE-2024-38252/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38250](https://insights.sbomify.com/CVE-2024-38250/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-3825](https://insights.sbomify.com/CVE-2024-3825/): CSRF in BlazeMeter Jenkins plugin (medium 4.3) - [CVE-2024-38249](https://insights.sbomify.com/CVE-2024-38249/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38248](https://insights.sbomify.com/CVE-2024-38248/): Windows Storage Elevation of Privilege Vulnerability (high 7.0) - [CVE-2024-38247](https://insights.sbomify.com/CVE-2024-38247/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38246](https://insights.sbomify.com/CVE-2024-38246/): Win32k Elevation of Privilege Vulnerability (high 7.0) - [CVE-2024-38245](https://insights.sbomify.com/CVE-2024-38245/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38244](https://insights.sbomify.com/CVE-2024-38244/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38243](https://insights.sbomify.com/CVE-2024-38243/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38242](https://insights.sbomify.com/CVE-2024-38242/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38241](https://insights.sbomify.com/CVE-2024-38241/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38240](https://insights.sbomify.com/CVE-2024-38240/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 8.1) - [CVE-2024-3824](https://insights.sbomify.com/CVE-2024-3824/): Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF (medium 5.5) - [CVE-2024-38239](https://insights.sbomify.com/CVE-2024-38239/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.2) - [CVE-2024-38238](https://insights.sbomify.com/CVE-2024-38238/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38237](https://insights.sbomify.com/CVE-2024-38237/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38236](https://insights.sbomify.com/CVE-2024-38236/): DHCP Server Service Denial of Service Vulnerability (high 7.5) - [CVE-2024-38235](https://insights.sbomify.com/CVE-2024-38235/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5) - [CVE-2024-38234](https://insights.sbomify.com/CVE-2024-38234/): Windows Networking Denial of Service Vulnerability (medium 6.5) - [CVE-2024-38233](https://insights.sbomify.com/CVE-2024-38233/): Windows Networking Denial of Service Vulnerability (high 7.5) - [CVE-2024-38232](https://insights.sbomify.com/CVE-2024-38232/): Windows Networking Denial of Service Vulnerability (high 7.5) - [CVE-2024-38231](https://insights.sbomify.com/CVE-2024-38231/): Windows Remote Desktop Licensing Service Denial of Service Vulnerability (medium 6.5) - [CVE-2024-38230](https://insights.sbomify.com/CVE-2024-38230/): Windows Standards-Based Storage Management Service Denial of Service Vulnerability (medium 6.5) - [CVE-2024-3823](https://insights.sbomify.com/CVE-2024-3823/): Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF (low 2.4) - [CVE-2024-38229](https://insights.sbomify.com/CVE-2024-38229/): .NET and Visual Studio Remote Code Execution Vulnerability (high 8.1) - [CVE-2024-38228](https://insights.sbomify.com/CVE-2024-38228/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2) - [CVE-2024-38227](https://insights.sbomify.com/CVE-2024-38227/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2) - [CVE-2024-38226](https://insights.sbomify.com/CVE-2024-38226/): Microsoft Publisher Protection Mechanism Failure (high 7.3, exploited in the wild) - [CVE-2024-38225](https://insights.sbomify.com/CVE-2024-38225/): Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (high 8.8) - [CVE-2024-38223](https://insights.sbomify.com/CVE-2024-38223/): Windows Initial Machine Configuration Elevation of Privilege Vulnerability (medium 6.8) - [CVE-2024-38222](https://insights.sbomify.com/CVE-2024-38222/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 6.5) - [CVE-2024-38221](https://insights.sbomify.com/CVE-2024-38221/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3) - [CVE-2024-38220](https://insights.sbomify.com/CVE-2024-38220/): Azure Stack Hub Elevation of Privilege Vulnerability (critical 9.0) - [CVE-2024-3822](https://insights.sbomify.com/CVE-2024-3822/): Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS (medium 4.8) - [CVE-2024-38219](https://insights.sbomify.com/CVE-2024-38219/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 6.5) - [CVE-2024-38218](https://insights.sbomify.com/CVE-2024-38218/): Microsoft Edge (HTML-based) Memory Corruption Vulnerability (high 8.4) - [CVE-2024-38217](https://insights.sbomify.com/CVE-2024-38217/): Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure (medium 5.4, exploited in the wild) - [CVE-2024-38216](https://insights.sbomify.com/CVE-2024-38216/): Azure Stack Hub Elevation of Privilege Vulnerability (high 8.2) - [CVE-2024-38215](https://insights.sbomify.com/CVE-2024-38215/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38214](https://insights.sbomify.com/CVE-2024-38214/): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (medium 6.5) - [CVE-2024-38213](https://insights.sbomify.com/CVE-2024-38213/): Microsoft Windows SmartScreen Security Feature Bypass (medium 6.5, exploited in the wild) - [CVE-2024-38212](https://insights.sbomify.com/CVE-2024-38212/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-38211](https://insights.sbomify.com/CVE-2024-38211/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 8.2) - [CVE-2024-38210](https://insights.sbomify.com/CVE-2024-38210/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-3821](https://insights.sbomify.com/CVE-2024-3821/): wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification (high 7.3) - [CVE-2024-38209](https://insights.sbomify.com/CVE-2024-38209/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-38208](https://insights.sbomify.com/CVE-2024-38208/): Microsoft Edge for Android Spoofing Vulnerability (medium 6.1) - [CVE-2024-38207](https://insights.sbomify.com/CVE-2024-38207/): Microsoft Edge (HTML-based) Memory Corruption Vulnerability (medium 6.3) - [CVE-2024-38206](https://insights.sbomify.com/CVE-2024-38206/): Microsoft Copilot Studio Information Disclosure Vulnerability (high 8.5) - [CVE-2024-38204](https://insights.sbomify.com/CVE-2024-38204/): Imagine Cup site Information Disclosure Vulnerability (high 7.5) - [CVE-2024-38203](https://insights.sbomify.com/CVE-2024-38203/): Windows Package Library Manager Information Disclosure Vulnerability (medium 6.2) - [CVE-2024-38202](https://insights.sbomify.com/CVE-2024-38202/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.3) - [CVE-2024-38201](https://insights.sbomify.com/CVE-2024-38201/): Azure Stack Hub Elevation of Privilege Vulnerability (high 7.0) - [CVE-2024-38200](https://insights.sbomify.com/CVE-2024-38200/): Microsoft Office Spoofing Vulnerability (medium 6.5) - [CVE-2024-3820](https://insights.sbomify.com/CVE-2024-3820/): wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection (critical 10.0) - [CVE-2024-38199](https://insights.sbomify.com/CVE-2024-38199/): Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability (critical 9.8) - [CVE-2024-38198](https://insights.sbomify.com/CVE-2024-38198/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.5) - [CVE-2024-38197](https://insights.sbomify.com/CVE-2024-38197/): Microsoft Teams for iOS Spoofing Vulnerability (medium 6.5) - [CVE-2024-38196](https://insights.sbomify.com/CVE-2024-38196/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38195](https://insights.sbomify.com/CVE-2024-38195/): Azure CycleCloud Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-38194](https://insights.sbomify.com/CVE-2024-38194/): Azure Web Apps Elevation of Privilege Vulnerability (high 8.4) - [CVE-2024-38193](https://insights.sbomify.com/CVE-2024-38193/): Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2024-38191](https://insights.sbomify.com/CVE-2024-38191/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38190](https://insights.sbomify.com/CVE-2024-38190/): Power Platform Information Disclosure Vulnerability (high 8.6) - [CVE-2024-3819](https://insights.sbomify.com/CVE-2024-3819/): Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner (medium 6.4) - [CVE-2024-38189](https://insights.sbomify.com/CVE-2024-38189/): Microsoft Project Remote Code Execution Vulnerability (high 8.8, exploited in the wild) - [CVE-2024-38188](https://insights.sbomify.com/CVE-2024-38188/): Azure Network Watcher VM Agent Elevation of Privilege Vulnerability (high 7.1) - [CVE-2024-38187](https://insights.sbomify.com/CVE-2024-38187/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38186](https://insights.sbomify.com/CVE-2024-38186/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38185](https://insights.sbomify.com/CVE-2024-38185/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38184](https://insights.sbomify.com/CVE-2024-38184/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-38183](https://insights.sbomify.com/CVE-2024-38183/): GroupMe Elevation of Privilege Vulnerability (critical 9.8) - [CVE-2024-38182](https://insights.sbomify.com/CVE-2024-38182/): Microsoft Dynamics 365 Elevation of Privilege Vulnerability (critical 9.0) - [CVE-2024-38180](https://insights.sbomify.com/CVE-2024-38180/): Windows SmartScreen Security Feature Bypass Vulnerability (high 8.8) - [CVE-2024-3818](https://insights.sbomify.com/CVE-2024-3818/): Cross-site scripting in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (medium 5.4) - [CVE-2024-38179](https://insights.sbomify.com/CVE-2024-38179/): Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability (high 8.8) - [CVE-2024-38178](https://insights.sbomify.com/CVE-2024-38178/): Microsoft Windows Scripting Engine Memory Corruption (high 7.5, exploited in the wild) - [CVE-2024-38177](https://insights.sbomify.com/CVE-2024-38177/): Windows App Installer Spoofing Vulnerability (high 7.8) - [CVE-2024-38176](https://insights.sbomify.com/CVE-2024-38176/): GroupMe Elevation of Privilege Vulnerability (high 8.1) - [CVE-2024-38175](https://insights.sbomify.com/CVE-2024-38175/): Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability (critical 9.6) - [CVE-2024-38173](https://insights.sbomify.com/CVE-2024-38173/): Microsoft Outlook Remote Code Execution Vulnerability (medium 6.7) - [CVE-2024-38172](https://insights.sbomify.com/CVE-2024-38172/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-38171](https://insights.sbomify.com/CVE-2024-38171/): Microsoft PowerPoint Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-38170](https://insights.sbomify.com/CVE-2024-38170/): Microsoft Excel Remote Code Execution Vulnerability (high 7.1) - [CVE-2024-3817](https://insights.sbomify.com/CVE-2024-3817/): HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches (critical 9.8) - [CVE-2024-38169](https://insights.sbomify.com/CVE-2024-38169/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/323/