# Vulnerabilities published in 2024


- [CVE-2024-21466](https://insights.sbomify.com/CVE-2024-21466/): Integer Underflow (Wrap or Wraparound) in WLAN Host Communication (medium 6.5)
- [CVE-2024-21465](https://insights.sbomify.com/CVE-2024-21465/): Buffer Over-read in Trusted Execution Environment (high 7.8)
- [CVE-2024-21464](https://insights.sbomify.com/CVE-2024-21464/): Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity (high 8.4)
- [CVE-2024-21463](https://insights.sbomify.com/CVE-2024-21463/): Buffer Copy Without Checking Size of Input in Audio (high 7.3)
- [CVE-2024-21462](https://insights.sbomify.com/CVE-2024-21462/): Buffer Over-read in TZ Secure OS (high 7.1)
- [CVE-2024-21461](https://insights.sbomify.com/CVE-2024-21461/): Double Free in HLOS (high 8.4)
- [CVE-2024-21460](https://insights.sbomify.com/CVE-2024-21460/): Use of Insufficiently Random Values in Core (high 7.1)
- [CVE-2024-2146](https://insights.sbomify.com/CVE-2024-2146/): SourceCodester Online Mobile Management Store ?p=products cross site scripting (low 3.5)
- [CVE-2024-21459](https://insights.sbomify.com/CVE-2024-21459/): Buffer Over-read in WLAN HOST (medium 6.5)
- [CVE-2024-21458](https://insights.sbomify.com/CVE-2024-21458/): Buffer Over-read in WLAN HOST (medium 6.5)
- [CVE-2024-21457](https://insights.sbomify.com/CVE-2024-21457/): Buffer Over-read in WLAN Host Communication (medium 6.5)
- [CVE-2024-21456](https://insights.sbomify.com/CVE-2024-21456/): Buffer Over-read in WLAN HOST (medium 6.5)
- [CVE-2024-21455](https://insights.sbomify.com/CVE-2024-21455/): Untrusted Pointer Dereference in DSP Service (high 7.8)
- [CVE-2024-21454](https://insights.sbomify.com/CVE-2024-21454/): Integer Overflow to Buffer Overflow in Automotive Telematics (high 7.5)
- [CVE-2024-21453](https://insights.sbomify.com/CVE-2024-21453/): Improper Input Validation in Automotive Telematics (high 7.5)
- [CVE-2024-21452](https://insights.sbomify.com/CVE-2024-21452/): Improper Input Validation in Automotive Telematics (high 7.3)
- [CVE-2024-21451](https://insights.sbomify.com/CVE-2024-21451/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21450](https://insights.sbomify.com/CVE-2024-21450/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2145](https://insights.sbomify.com/CVE-2024-2145/): SourceCodester Online Mobile Management Store update-tracker.php cross site scripting (low 3.5)
- [CVE-2024-21449](https://insights.sbomify.com/CVE-2024-21449/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21448](https://insights.sbomify.com/CVE-2024-21448/): Microsoft Teams for Android Information Disclosure Vulnerability (medium 5.0)
- [CVE-2024-21447](https://insights.sbomify.com/CVE-2024-21447/): Windows Authentication Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21446](https://insights.sbomify.com/CVE-2024-21446/): NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21445](https://insights.sbomify.com/CVE-2024-21445/): Windows USB Print Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21444](https://insights.sbomify.com/CVE-2024-21444/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21443](https://insights.sbomify.com/CVE-2024-21443/): Windows Kernel Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-21442](https://insights.sbomify.com/CVE-2024-21442/): Windows USB Print Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21441](https://insights.sbomify.com/CVE-2024-21441/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21440](https://insights.sbomify.com/CVE-2024-21440/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2144](https://insights.sbomify.com/CVE-2024-2144/): Cross-site scripting in Ultimate Addons for Beaver Builder – Lite (medium 6.4)
- [CVE-2024-21439](https://insights.sbomify.com/CVE-2024-21439/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21438](https://insights.sbomify.com/CVE-2024-21438/): Microsoft AllJoyn API Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21437](https://insights.sbomify.com/CVE-2024-21437/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21436](https://insights.sbomify.com/CVE-2024-21436/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21435](https://insights.sbomify.com/CVE-2024-21435/): Windows OLE Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21434](https://insights.sbomify.com/CVE-2024-21434/): Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21433](https://insights.sbomify.com/CVE-2024-21433/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21432](https://insights.sbomify.com/CVE-2024-21432/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21431](https://insights.sbomify.com/CVE-2024-21431/): Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2024-21430](https://insights.sbomify.com/CVE-2024-21430/): Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability (medium 5.7)
- [CVE-2024-2143](https://insights.sbomify.com/CVE-2024-2143/): Cross-site scripting in Ultimate Addons for Beaver Builder – Lite (medium 6.4)
- [CVE-2024-21429](https://insights.sbomify.com/CVE-2024-21429/): Windows USB Hub Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-21428](https://insights.sbomify.com/CVE-2024-21428/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21427](https://insights.sbomify.com/CVE-2024-21427/): Windows Kerberos Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2024-21426](https://insights.sbomify.com/CVE-2024-21426/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-21425](https://insights.sbomify.com/CVE-2024-21425/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21424](https://insights.sbomify.com/CVE-2024-21424/): Azure Compute Gallery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2024-21423](https://insights.sbomify.com/CVE-2024-21423/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 4.8)
- [CVE-2024-21421](https://insights.sbomify.com/CVE-2024-21421/): Azure SDK Spoofing Vulnerability (high 7.5)
- [CVE-2024-21420](https://insights.sbomify.com/CVE-2024-21420/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2142](https://insights.sbomify.com/CVE-2024-2142/): Cross-site scripting in Ultimate Addons for Beaver Builder – Lite (medium 6.4)
- [CVE-2024-21419](https://insights.sbomify.com/CVE-2024-21419/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 7.6)
- [CVE-2024-21418](https://insights.sbomify.com/CVE-2024-21418/): Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21417](https://insights.sbomify.com/CVE-2024-21417/): Windows Text Services Framework Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-21416](https://insights.sbomify.com/CVE-2024-21416/): Windows TCP/IP Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-21415](https://insights.sbomify.com/CVE-2024-21415/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21414](https://insights.sbomify.com/CVE-2024-21414/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21413](https://insights.sbomify.com/CVE-2024-21413/): Microsoft Outlook Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2024-21412](https://insights.sbomify.com/CVE-2024-21412/): Microsoft Windows Internet Shortcut Files Security Feature Bypass (high 8.1, exploited in the wild)
- [CVE-2024-21411](https://insights.sbomify.com/CVE-2024-21411/): Skype for Consumer Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21410](https://insights.sbomify.com/CVE-2024-21410/): Microsoft Exchange Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2024-2141](https://insights.sbomify.com/CVE-2024-2141/): Cross-site scripting in Ultimate Addons for Beaver Builder – Lite (medium 6.4)
- [CVE-2024-21409](https://insights.sbomify.com/CVE-2024-21409/): .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (high 7.3)
- [CVE-2024-21408](https://insights.sbomify.com/CVE-2024-21408/): Windows Hyper-V Denial of Service Vulnerability (medium 5.5)
- [CVE-2024-21407](https://insights.sbomify.com/CVE-2024-21407/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-21406](https://insights.sbomify.com/CVE-2024-21406/): Windows Printing Service Spoofing Vulnerability (high 7.5)
- [CVE-2024-21405](https://insights.sbomify.com/CVE-2024-21405/): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21404](https://insights.sbomify.com/CVE-2024-21404/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21403](https://insights.sbomify.com/CVE-2024-21403/): Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (critical 9.0)
- [CVE-2024-21402](https://insights.sbomify.com/CVE-2024-21402/): Microsoft Outlook Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2024-21401](https://insights.sbomify.com/CVE-2024-21401/): Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability (critical 9.8)
- [CVE-2024-21400](https://insights.sbomify.com/CVE-2024-21400/): Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (critical 9.0)
- [CVE-2024-2140](https://insights.sbomify.com/CVE-2024-2140/): Cross-site scripting in Ultimate Addons for Beaver Builder – Lite (medium 6.4)
- [CVE-2024-21399](https://insights.sbomify.com/CVE-2024-21399/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.3)
- [CVE-2024-21398](https://insights.sbomify.com/CVE-2024-21398/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21397](https://insights.sbomify.com/CVE-2024-21397/): Microsoft Azure File Sync Elevation of Privilege Vulnerability (medium 5.3)
- [CVE-2024-21396](https://insights.sbomify.com/CVE-2024-21396/): Dynamics 365 Sales Spoofing Vulnerability (high 7.6)
- [CVE-2024-21395](https://insights.sbomify.com/CVE-2024-21395/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 8.2)
- [CVE-2024-21394](https://insights.sbomify.com/CVE-2024-21394/): Dynamics 365 Field Service Spoofing Vulnerability (high 7.6)
- [CVE-2024-21393](https://insights.sbomify.com/CVE-2024-21393/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 7.6)
- [CVE-2024-21392](https://insights.sbomify.com/CVE-2024-21392/): .NET and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21391](https://insights.sbomify.com/CVE-2024-21391/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21390](https://insights.sbomify.com/CVE-2024-21390/): Microsoft Authenticator Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2024-2139](https://insights.sbomify.com/CVE-2024-2139/): Cross-site scripting in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits (medium 6.4)
- [CVE-2024-21389](https://insights.sbomify.com/CVE-2024-21389/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 7.6)
- [CVE-2024-21388](https://insights.sbomify.com/CVE-2024-21388/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2024-21387](https://insights.sbomify.com/CVE-2024-21387/): Microsoft Edge for Android Spoofing Vulnerability (medium 5.3)
- [CVE-2024-21386](https://insights.sbomify.com/CVE-2024-21386/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21385](https://insights.sbomify.com/CVE-2024-21385/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2024-21384](https://insights.sbomify.com/CVE-2024-21384/): Microsoft Office OneNote Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-21383](https://insights.sbomify.com/CVE-2024-21383/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (low 3.3)
- [CVE-2024-21382](https://insights.sbomify.com/CVE-2024-21382/): Microsoft Edge for Android Information Disclosure Vulnerability (medium 4.3)
- [CVE-2024-21381](https://insights.sbomify.com/CVE-2024-21381/): Microsoft Azure Active Directory B2C Spoofing Vulnerability (medium 6.8)
- [CVE-2024-21380](https://insights.sbomify.com/CVE-2024-21380/): Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability (high 8.0)
- [CVE-2024-2138](https://insights.sbomify.com/CVE-2024-2138/): JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget (medium 6.4)
- [CVE-2024-21379](https://insights.sbomify.com/CVE-2024-21379/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-21378](https://insights.sbomify.com/CVE-2024-21378/): Microsoft Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21377](https://insights.sbomify.com/CVE-2024-21377/): Windows DNS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-21376](https://insights.sbomify.com/CVE-2024-21376/): Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability (critical 9.0)
- [CVE-2024-21375](https://insights.sbomify.com/CVE-2024-21375/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/452/