# Vulnerabilities published in 2024


- [CVE-2024-0043](https://insights.sbomify.com/CVE-2024-0043/): Privilege escalation in Android (high 7.8)
- [CVE-2024-0042](https://insights.sbomify.com/CVE-2024-0042/): Security feature bypass in Android (medium 5.6)
- [CVE-2024-0041](https://insights.sbomify.com/CVE-2024-0041/): Race condition in Android (high 8.4)
- [CVE-2024-0040](https://insights.sbomify.com/CVE-2024-0040/): Memory corruption in Android (high 7.5)
- [CVE-2024-0039](https://insights.sbomify.com/CVE-2024-0039/): Memory corruption in Android (critical 9.8)
- [CVE-2024-0038](https://insights.sbomify.com/CVE-2024-0038/): Missing authorization in Android (high 8.4)
- [CVE-2024-0037](https://insights.sbomify.com/CVE-2024-0037/): Missing authorization in Android (low 3.3)
- [CVE-2024-0036](https://insights.sbomify.com/CVE-2024-0036/): Security feature bypass in Android (high 7.4)
- [CVE-2024-0035](https://insights.sbomify.com/CVE-2024-0035/): Null dereference in Android (high 7.4)
- [CVE-2024-0034](https://insights.sbomify.com/CVE-2024-0034/): Privilege escalation in Android (high 7.8)
- [CVE-2024-0033](https://insights.sbomify.com/CVE-2024-0033/): Memory corruption in Android (high 8.4)
- [CVE-2024-0032](https://insights.sbomify.com/CVE-2024-0032/): Security feature bypass in Android (medium 6.8)
- [CVE-2024-0031](https://insights.sbomify.com/CVE-2024-0031/): Memory corruption in Android (critical 9.8)
- [CVE-2024-0030](https://insights.sbomify.com/CVE-2024-0030/): Memory corruption in Android (medium 5.5)
- [CVE-2024-0029](https://insights.sbomify.com/CVE-2024-0029/): Security feature bypass in Android (high 7.1)
- [CVE-2024-0028](https://insights.sbomify.com/CVE-2024-0028/): Missing authorization in Android (medium 5.5)
- [CVE-2024-0027](https://insights.sbomify.com/CVE-2024-0027/): Denial of service in Android (medium 5.9)
- [CVE-2024-0026](https://insights.sbomify.com/CVE-2024-0026/): Denial of service in Android (medium 4.7)
- [CVE-2024-0025](https://insights.sbomify.com/CVE-2024-0025/): Privilege escalation in Android (high 7.8)
- [CVE-2024-0024](https://insights.sbomify.com/CVE-2024-0024/): Privilege escalation in Android (high 7.8)
- [CVE-2024-0023](https://insights.sbomify.com/CVE-2024-0023/): Memory corruption in Android (high 7.4)
- [CVE-2024-0022](https://insights.sbomify.com/CVE-2024-0022/): Information disclosure in Android (medium 5.5)
- [CVE-2024-0021](https://insights.sbomify.com/CVE-2024-0021/): Privilege escalation in Android (high 7.0)
- [CVE-2024-0020](https://insights.sbomify.com/CVE-2024-0020/): Information disclosure in Android (medium 5.5)
- [CVE-2024-0019](https://insights.sbomify.com/CVE-2024-0019/): Security feature bypass in Android (medium 6.2)
- [CVE-2024-0018](https://insights.sbomify.com/CVE-2024-0018/): Memory corruption in Android (high 8.4)
- [CVE-2024-0017](https://insights.sbomify.com/CVE-2024-0017/): Security feature bypass in Android (medium 5.5)
- [CVE-2024-0016](https://insights.sbomify.com/CVE-2024-0016/): Memory corruption in Android (medium 6.5)
- [CVE-2024-0015](https://insights.sbomify.com/CVE-2024-0015/): Privilege escalation in Android (high 7.8)
- [CVE-2024-0014](https://insights.sbomify.com/CVE-2024-0014/): Business logic in Android (high 8.4)
- [CVE-2024-0012](https://insights.sbomify.com/CVE-2024-0012/): Palo Alto Networks PAN-OS Management Interface Authentication Bypass (critical 9.3, exploited in the wild)
- [CVE-2024-0011](https://insights.sbomify.com/CVE-2024-0011/): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication (medium 4.3)
- [CVE-2024-0010](https://insights.sbomify.com/CVE-2024-0010/): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal (medium 4.3)
- [CVE-2024-0009](https://insights.sbomify.com/CVE-2024-0009/): PAN-OS: Improper IP Address Verification in GlobalProtect Gateway (medium 6.3)
- [CVE-2024-0008](https://insights.sbomify.com/CVE-2024-0008/): PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface (medium 6.6)
- [CVE-2024-0007](https://insights.sbomify.com/CVE-2024-0007/): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (medium 6.8)
- [CVE-2024-0006](https://insights.sbomify.com/CVE-2024-0006/): DB User Password Leak in Application Log (medium 5.4)
- [CVE-2024-0005](https://insights.sbomify.com/CVE-2024-0005/): Command injection in FlashArray (critical 9.1)
- [CVE-2024-0004](https://insights.sbomify.com/CVE-2024-0004/): Code injection in FlashArray (critical 9.1)
- [CVE-2024-0003](https://insights.sbomify.com/CVE-2024-0003/): Privilege escalation in FlashArray (critical 9.1)
- [CVE-2024-0002](https://insights.sbomify.com/CVE-2024-0002/): Auth bypass in FlashArray (critical 10.0)
- [CVE-2024-0001](https://insights.sbomify.com/CVE-2024-0001/): Misconfiguration in FlashArray (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/521/