VulnSea

Weekly digest

Week 24, 2024 (10–16 Jun)

A heavy week: 64 new CVEs, well above the recent average of about 24. Severity skewed high: 2 critical and 38 high, 63% of the total. 5 arrived with exploitation evidence or public exploit code already attached. No new KEV entries. microsoft was the most-affected vendor with 48.

64
New CVEs
2
Critical
0
KEV additions
0
Records changed

New this week, ranked by depth score

The 12 that matter most of the 64 published.

CVE-2024-30088High· 7.0CISA KEVPoC
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 68%via NVD
CVE-2024-35250High· 7.8CISA KEVPoC
2y ago

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

▾ Abyssalmicrosoft · windows_10_1507EPSS 25%via NVD
CVE-2024-30080Critical· 9.8
2y ago

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 43%via NVD
CVE-2024-30085High· 7.8PoC
2y ago

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1809EPSS 14%via NVD
CVE-2024-36265Critical· 9.8
2y ago

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST…

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST…

▾ Midnightapache · submarineEPSS 0.74%via NVD
CVE-2024-30090High· 7.0PoC
2y ago

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

▾ Midnightmicrosoft · windows_10_1507EPSS 2.0%via NVD
CVE-2024-35249High· 8.8
2y ago

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

▾ Twilightmicrosoft · dynamics_365_business_centralEPSS 3.4%via NVD
CVE-2024-30103High· 8.8
2y ago

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

▾ Twilightmicrosoft · 365_appsEPSS 3.4%via NVD
CVE-2024-30097High· 8.8
2y ago

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 1.7%via NVD
CVE-2024-30078High· 8.8
2y ago

Windows Wi-Fi Driver Remote Code Execution Vulnerability

Windows Wi-Fi Driver Remote Code Execution Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 5.2%via NVD
CVE-2024-30068High· 8.8
2y ago

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

▾ Twilightmicrosoft · windows_10_1507EPSS 0.78%via NVD
CVE-2024-36586High· 8.8
2y ago

AdGuardHome privilege escalation vulnerability

AdGuardHome privilege escalation vulnerability

▾ TwilightAdguardTeam · github.com/AdguardTeam/AdGuardHomeEPSS 0.21%via OSV

Most-affected vendors

By CVEs published in the period.