# Vulnerabilities published in 2024


- [CVE-2024-38168](https://insights.sbomify.com/CVE-2024-38168/): .NET and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38167](https://insights.sbomify.com/CVE-2024-38167/): .NET and Visual Studio Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-38166](https://insights.sbomify.com/CVE-2024-38166/): Microsoft Dynamics 365 Cross-site Scripting Vulnerability (high 8.2)
- [CVE-2024-38165](https://insights.sbomify.com/CVE-2024-38165/): Windows Compressed Folder Tampering Vulnerability (medium 6.5)
- [CVE-2024-38164](https://insights.sbomify.com/CVE-2024-38164/): GroupMe Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2024-38163](https://insights.sbomify.com/CVE-2024-38163/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38162](https://insights.sbomify.com/CVE-2024-38162/): Azure Connected Machine Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38161](https://insights.sbomify.com/CVE-2024-38161/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-38160](https://insights.sbomify.com/CVE-2024-38160/): Windows Network Virtualization Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2024-3816](https://insights.sbomify.com/CVE-2024-3816/): SQLi in S@M CMS (critical 9.8)
- [CVE-2024-38159](https://insights.sbomify.com/CVE-2024-38159/): Windows Network Virtualization Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2024-38158](https://insights.sbomify.com/CVE-2024-38158/): Azure IoT SDK Remote Code Execution Vulnerability (high 7.0)
- [CVE-2024-38157](https://insights.sbomify.com/CVE-2024-38157/): Azure IoT SDK Remote Code Execution Vulnerability (high 7.0)
- [CVE-2024-38156](https://insights.sbomify.com/CVE-2024-38156/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 6.1)
- [CVE-2024-38155](https://insights.sbomify.com/CVE-2024-38155/): Security Center Broker Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38154](https://insights.sbomify.com/CVE-2024-38154/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38153](https://insights.sbomify.com/CVE-2024-38153/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38152](https://insights.sbomify.com/CVE-2024-38152/): Windows OLE Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-38151](https://insights.sbomify.com/CVE-2024-38151/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38150](https://insights.sbomify.com/CVE-2024-38150/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-3815](https://insights.sbomify.com/CVE-2024-3815/): Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta (medium 5.5)
- [CVE-2024-38149](https://insights.sbomify.com/CVE-2024-38149/): BranchCache Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38148](https://insights.sbomify.com/CVE-2024-38148/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38147](https://insights.sbomify.com/CVE-2024-38147/): Microsoft DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38146](https://insights.sbomify.com/CVE-2024-38146/): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38145](https://insights.sbomify.com/CVE-2024-38145/): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38144](https://insights.sbomify.com/CVE-2024-38144/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-38143](https://insights.sbomify.com/CVE-2024-38143/): Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability (medium 4.2)
- [CVE-2024-38142](https://insights.sbomify.com/CVE-2024-38142/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38141](https://insights.sbomify.com/CVE-2024-38141/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38140](https://insights.sbomify.com/CVE-2024-38140/): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-3814](https://insights.sbomify.com/CVE-2024-3814/): tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta (medium 5.5)
- [CVE-2024-38139](https://insights.sbomify.com/CVE-2024-38139/): Microsoft Dataverse Elevation of Privilege Vulnerability (high 8.7)
- [CVE-2024-38138](https://insights.sbomify.com/CVE-2024-38138/): Windows Deployment Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-38137](https://insights.sbomify.com/CVE-2024-38137/): Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-38136](https://insights.sbomify.com/CVE-2024-38136/): Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-38135](https://insights.sbomify.com/CVE-2024-38135/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38134](https://insights.sbomify.com/CVE-2024-38134/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38133](https://insights.sbomify.com/CVE-2024-38133/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38132](https://insights.sbomify.com/CVE-2024-38132/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38131](https://insights.sbomify.com/CVE-2024-38131/): Clipboard Virtual Channel Extension Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38130](https://insights.sbomify.com/CVE-2024-38130/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-3813](https://insights.sbomify.com/CVE-2024-3813/): tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode (high 8.8)
- [CVE-2024-38129](https://insights.sbomify.com/CVE-2024-38129/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2024-38128](https://insights.sbomify.com/CVE-2024-38128/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38127](https://insights.sbomify.com/CVE-2024-38127/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38126](https://insights.sbomify.com/CVE-2024-38126/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38125](https://insights.sbomify.com/CVE-2024-38125/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38124](https://insights.sbomify.com/CVE-2024-38124/): Windows Netlogon Elevation of Privilege Vulnerability (critical 9.0)
- [CVE-2024-38123](https://insights.sbomify.com/CVE-2024-38123/): Windows Bluetooth Driver Information Disclosure Vulnerability (medium 4.4)
- [CVE-2024-38122](https://insights.sbomify.com/CVE-2024-38122/): Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38121](https://insights.sbomify.com/CVE-2024-38121/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38120](https://insights.sbomify.com/CVE-2024-38120/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-3812](https://insights.sbomify.com/CVE-2024-3812/): Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode (high 7.5)
- [CVE-2024-38119](https://insights.sbomify.com/CVE-2024-38119/): Windows Network Address Translation (NAT) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-38118](https://insights.sbomify.com/CVE-2024-38118/): Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38117](https://insights.sbomify.com/CVE-2024-38117/): NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38116](https://insights.sbomify.com/CVE-2024-38116/): Windows IP Routing Management Snapin Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38115](https://insights.sbomify.com/CVE-2024-38115/): Windows IP Routing Management Snapin Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38114](https://insights.sbomify.com/CVE-2024-38114/): Windows IP Routing Management Snapin Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38112](https://insights.sbomify.com/CVE-2024-38112/): Microsoft Windows MSHTML Platform Spoofing (high 7.5, exploited in the wild)
- [CVE-2024-3811](https://insights.sbomify.com/CVE-2024-3811/): Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2024-38109](https://insights.sbomify.com/CVE-2024-38109/): Azure Health Bot Elevation of Privilege Vulnerability (critical 9.1)
- [CVE-2024-38108](https://insights.sbomify.com/CVE-2024-38108/): Azure Stack Hub Spoofing Vulnerability (critical 9.3)
- [CVE-2024-38107](https://insights.sbomify.com/CVE-2024-38107/): Microsoft Windows Power Dependency Coordinator Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-38106](https://insights.sbomify.com/CVE-2024-38106/): Microsoft Windows Kernel Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2024-38105](https://insights.sbomify.com/CVE-2024-38105/): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-38104](https://insights.sbomify.com/CVE-2024-38104/): Windows Fax Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38103](https://insights.sbomify.com/CVE-2024-38103/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 5.9)
- [CVE-2024-38102](https://insights.sbomify.com/CVE-2024-38102/): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-38101](https://insights.sbomify.com/CVE-2024-38101/): Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-38100](https://insights.sbomify.com/CVE-2024-38100/): Windows File Explorer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-3810](https://insights.sbomify.com/CVE-2024-3810/): Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode (high 8.8)
- [CVE-2024-38099](https://insights.sbomify.com/CVE-2024-38099/): Windows Remote Desktop Licensing Service Denial of Service Vulnerability (medium 5.9)
- [CVE-2024-38098](https://insights.sbomify.com/CVE-2024-38098/): Azure Connected Machine Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38097](https://insights.sbomify.com/CVE-2024-38097/): Azure Monitor Agent Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2024-38095](https://insights.sbomify.com/CVE-2024-38095/): .NET and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38094](https://insights.sbomify.com/CVE-2024-38094/): Microsoft SharePoint Deserialization (high 7.2, exploited in the wild)
- [CVE-2024-38093](https://insights.sbomify.com/CVE-2024-38093/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2024-38092](https://insights.sbomify.com/CVE-2024-38092/): Azure CycleCloud Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-38091](https://insights.sbomify.com/CVE-2024-38091/): Microsoft WS-Discovery Denial of Service Vulnerability (high 7.5)
- [CVE-2024-3809](https://insights.sbomify.com/CVE-2024-3809/): Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta (high 8.8)
- [CVE-2024-38089](https://insights.sbomify.com/CVE-2024-38089/): Microsoft Defender for IoT Elevation of Privilege Vulnerability (critical 9.1)
- [CVE-2024-38088](https://insights.sbomify.com/CVE-2024-38088/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38087](https://insights.sbomify.com/CVE-2024-38087/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38086](https://insights.sbomify.com/CVE-2024-38086/): Azure Kinect SDK Remote Code Execution Vulnerability (medium 6.4)
- [CVE-2024-38085](https://insights.sbomify.com/CVE-2024-38085/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38084](https://insights.sbomify.com/CVE-2024-38084/): Microsoft OfficePlus Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38083](https://insights.sbomify.com/CVE-2024-38083/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2024-38082](https://insights.sbomify.com/CVE-2024-38082/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.7)
- [CVE-2024-38081](https://insights.sbomify.com/CVE-2024-38081/): .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-38080](https://insights.sbomify.com/CVE-2024-38080/): Microsoft Windows Hyper-V Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-3808](https://insights.sbomify.com/CVE-2024-3808/): Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode (high 8.8)
- [CVE-2024-38079](https://insights.sbomify.com/CVE-2024-38079/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38078](https://insights.sbomify.com/CVE-2024-38078/): Xbox Wireless Adapter Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-38077](https://insights.sbomify.com/CVE-2024-38077/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-38076](https://insights.sbomify.com/CVE-2024-38076/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-38074](https://insights.sbomify.com/CVE-2024-38074/): Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-38073](https://insights.sbomify.com/CVE-2024-38073/): Windows Remote Desktop Licensing Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38072](https://insights.sbomify.com/CVE-2024-38072/): Windows Remote Desktop Licensing Service Denial of Service Vulnerability (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/324/