| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-39684 | Hig | 0.51 | 7.8 | 0.00 | Jul 9, 2024 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened;… | ||
| CVE-2024-38517 | Hig | 0.44 | 7.8 | 0.00 | Jul 9, 2024 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened;… | ||
| CVE-2024-34123 | Hig | 0.46 | 7.0 | 0.00 | Jul 9, 2024 | Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might… | ||
| CVE-2023-50807 | Hig | 0.53 | 8.1 | 0.00 | Jul 9, 2024 | A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth). | ||
| CVE-2023-50806 | Hig | 0.55 | 8.4 | 0.00 | Jul 9, 2024 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos… | ||
| CVE-2023-50805 | Hig | 0.53 | 8.1 | 0.00 | Jul 9, 2024 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos… | ||
| CVE-2024-6222 | Hig | 0.46 | 7.0 | 0.01 | Jul 9, 2024 | In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-note… | ||
| CVE-2024-39698 | Hig | 0.42 | 7.5 | 0.00 | Jul 9, 2024 | electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding shell, a first pass by… | ||
| CVE-2024-38112 | Hig | 0.67 | 7.5 | 0.84 | KEV | Jul 9, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-38104 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | Windows Fax Service Remote Code Execution Vulnerability | ||
| CVE-2024-38100 | Hig | 0.51 | 7.8 | 0.05 | Jul 9, 2024 | Windows File Explorer Elevation of Privilege Vulnerability | ||
| CVE-2024-38095 | Hig | 0.49 | 7.5 | 0.03 | Jul 9, 2024 | .NET and Visual Studio Denial of Service Vulnerability | ||
| CVE-2024-38094 | Hig | 0.69 | 7.2 | 0.51 | KEV | Jul 9, 2024 | Microsoft SharePoint Remote Code Execution Vulnerability | |
| CVE-2024-38092 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | Azure CycleCloud Elevation of Privilege Vulnerability | ||
| CVE-2024-38091 | Hig | 0.49 | 7.5 | 0.02 | Jul 9, 2024 | Microsoft WS-Discovery Denial of Service Vulnerability | ||
| CVE-2024-38088 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-38087 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-38085 | Hig | 0.51 | 7.8 | 0.05 | Jul 9, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38081 | Hig | 0.48 | 7.3 | 0.01 | Jul 9, 2024 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2024-38080 | Hig | 0.63 | 7.8 | 0.07 | KEV | Jul 9, 2024 | Windows Hyper-V Elevation of Privilege Vulnerability | |
| CVE-2024-38079 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38078 | Hig | 0.49 | 7.5 | 0.01 | Jul 9, 2024 | Xbox Wireless Adapter Remote Code Execution Vulnerability | ||
| CVE-2024-38073 | Hig | 0.49 | 7.5 | 0.02 | Jul 9, 2024 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability | ||
| CVE-2024-38072 | Hig | 0.49 | 7.5 | 0.02 | Jul 9, 2024 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability | ||
| CVE-2024-38071 | Hig | 0.52 | 7.5 | 0.36 | Jul 9, 2024 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability | ||
| CVE-2024-38070 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability | ||
| CVE-2024-38069 | Hig | 0.46 | 7.0 | 0.00 | Jul 9, 2024 | Windows Enroll Engine Security Feature Bypass Vulnerability | ||
| CVE-2024-38068 | Hig | 0.49 | 7.5 | 0.03 | Jul 9, 2024 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | ||
| CVE-2024-38067 | Hig | 0.49 | 7.5 | 0.03 | Jul 9, 2024 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | ||
| CVE-2024-38066 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-38064 | Hig | 0.49 | 7.5 | 0.02 | Jul 9, 2024 | Windows TCP/IP Information Disclosure Vulnerability | ||
| CVE-2024-38062 | Hig | 0.51 | 7.8 | 0.02 | Jul 9, 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38061 | Hig | 0.49 | 7.5 | 0.01 | Jul 9, 2024 | DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability | ||
| CVE-2024-38060 | Hig | 0.58 | 8.8 | 0.16 | Jul 9, 2024 | Windows Imaging Component Remote Code Execution Vulnerability | ||
| CVE-2024-38059 | Hig | 0.51 | 7.8 | 0.04 | Jul 9, 2024 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-38057 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38054 | Hig | 0.52 | 7.8 | 0.10 | Jul 9, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38053 | Hig | 0.57 | 8.8 | 0.01 | Jul 9, 2024 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability | ||
| CVE-2024-38052 | Hig | 0.51 | 7.8 | 0.07 | Jul 9, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38051 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Graphics Component Remote Code Execution Vulnerability | ||
| CVE-2024-38050 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Workstation Service Elevation of Privilege Vulnerability | ||
| CVE-2024-38047 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | PowerShell Elevation of Privilege Vulnerability | ||
| CVE-2024-38044 | Hig | 0.47 | 7.2 | 0.02 | Jul 9, 2024 | DHCP Server Service Remote Code Execution Vulnerability | ||
| CVE-2024-38043 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | PowerShell Elevation of Privilege Vulnerability | ||
| CVE-2024-38034 | Hig | 0.51 | 7.8 | 0.01 | Jul 9, 2024 | Windows Filtering Platform Elevation of Privilege Vulnerability | ||
| CVE-2024-38033 | Hig | 0.48 | 7.3 | 0.01 | Jul 9, 2024 | PowerShell Elevation of Privilege Vulnerability | ||
| CVE-2024-38032 | Hig | 0.46 | 7.1 | 0.01 | Jul 9, 2024 | Microsoft Xbox Remote Code Execution Vulnerability | ||
| CVE-2024-38031 | Hig | 0.49 | 7.5 | 0.03 | Jul 9, 2024 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | ||
| CVE-2024-38028 | Hig | 0.47 | 7.2 | 0.02 | Jul 9, 2024 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability | ||
| CVE-2024-38025 | Hig | 0.47 | 7.2 | 0.02 | Jul 9, 2024 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
- risk 0.51cvss 7.8epss 0.00
Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened;…
- risk 0.44cvss 7.8epss 0.00
Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened;…
- risk 0.46cvss 7.0epss 0.00
Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might…
- risk 0.53cvss 8.1epss 0.00
A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth).
- risk 0.55cvss 8.4epss 0.00
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos…
- risk 0.53cvss 8.1epss 0.00
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos…
- risk 0.46cvss 7.0epss 0.01
In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-note…
- risk 0.42cvss 7.5epss 0.00
electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding shell, a first pass by…
- risk 0.67cvss 7.5epss 0.84
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Fax Service Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.05
Windows File Explorer Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
.NET and Visual Studio Denial of Service Vulnerability
- risk 0.69cvss 7.2epss 0.51
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Azure CycleCloud Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Microsoft WS-Discovery Denial of Service Vulnerability
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.05
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
- risk 0.63cvss 7.8epss 0.07
Windows Hyper-V Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.01
Xbox Wireless Adapter Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- risk 0.52cvss 7.5epss 0.36
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows Enroll Engine Security Feature Bypass Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Win32k Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows TCP/IP Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.01
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.16
Windows Imaging Component Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.52cvss 7.8epss 0.10
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.07
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Workstation Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
PowerShell Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
DHCP Server Service Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
PowerShell Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Filtering Platform Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
PowerShell Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Xbox Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- risk 0.47cvss 7.2epss 0.02
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability