Security Warnings — Week: 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49006

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49007

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49008

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49009

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49010

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49011

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49012

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49013

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49014

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49015

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49016

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49017

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49018

highMicrosoft MSRC 2024-W46

staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()

2024-11-12 CVE-2024-50233

mediumMicrosoft MSRC 2024-W46

tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

2024-11-12 CVE-2024-50154

highMicrosoft MSRC 2024-W46

TorchGeo Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49048

highMicrosoft MSRC 2024-W46

tpm: Lock TPM chip in tpm_pm_suspend() first

2024-11-12 CVE-2024-53085

mediumMicrosoft MSRC 2024-W46

tracing: Consider the NULL character when validating the event length

2024-11-12 CVE-2024-50131

highMicrosoft MSRC 2024-W46

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

2024-11-12 CVE-2024-52336

highMicrosoft MSRC 2024-W46

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

2024-11-12 CVE-2024-52337

mediumMicrosoft MSRC 2024-W46

udf: fix uninit-value use in udf_get_fileshortad

2024-11-12 CVE-2024-50143

highMicrosoft MSRC 2024-W46

usb: musb: sunxi: Fix accessing an released usb phy

2024-11-12 CVE-2024-50269

highMicrosoft MSRC 2024-W46

USB: serial: io_edgeport: fix use after free in debug printk

2024-11-12 CVE-2024-50267

highMicrosoft MSRC 2024-W46

usb: typec: altmode should keep reference to parent

2024-11-12 CVE-2024-50150

highMicrosoft MSRC 2024-W46

usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()

2024-11-12 CVE-2024-50268

highMicrosoft MSRC 2024-W46

Use After Free with SSL_free_buffers

2024-11-12 CVE-2024-4741

highMicrosoft MSRC 2024-W46

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

2024-11-12 CVE-2024-21538

highMicrosoft MSRC 2024-W46

virtio_net: Add hash_key_length check

2024-11-12 CVE-2024-53082

highMicrosoft MSRC 2024-W46

virtio_pmem: Check device status before requesting flush

2024-11-12 CVE-2024-50184

mediumMicrosoft MSRC 2024-W46

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: t

2024-11-12 CVE-2024-53899

highMicrosoft MSRC 2024-W46

Visual Studio Code Python Extension Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49050

highMicrosoft MSRC 2024-W46

Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49049

highMicrosoft MSRC 2024-W46

Visual Studio Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49044

mediumMicrosoft MSRC 2024-W46

vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

2024-11-12 CVE-2024-50264

highMicrosoft MSRC 2024-W46

wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.

2024-11-12 CVE-2024-27532

highMicrosoft MSRC 2024-W46

wifi: cfg80211: clear wdev->cqm_config pointer on free

2024-11-12 CVE-2024-50235

highMicrosoft MSRC 2024-W46

wifi: iwlegacy: Clear stale interrupts before resuming device

2024-11-12 CVE-2024-50234

highMicrosoft MSRC 2024-W46

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

2024-11-12 CVE-2024-53059

highMicrosoft MSRC 2024-W46

Win32k Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43636

highMicrosoft MSRC 2024-W46

Windows Client-Side Caching Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43644

highMicrosoft MSRC 2024-W46

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

2024-11-12 CVE-2024-43645

mediumMicrosoft MSRC 2024-W46

Windows DNS Spoofing Vulnerability

2024-11-12 CVE-2024-43450

highMicrosoft MSRC 2024-W46

Windows DWM Core Library Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43629

highMicrosoft MSRC 2024-W46

Windows Hyper-V Denial of Service Vulnerability

2024-11-12 CVE-2024-43633

mediumMicrosoft MSRC 2024-W46

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43624

highMicrosoft MSRC 2024-W46

Windows KDC Proxy Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43639

criticalMicrosoft MSRC 2024-W46

Windows Kernel Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43630

highMicrosoft MSRC 2024-W46

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43640

highMicrosoft MSRC 2024-W46

Windows NT OS Kernel Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43623

highMicrosoft MSRC 2024-W46

Windows Package Library Manager Information Disclosure Vulnerability

2024-11-12 CVE-2024-38203

mediumMicrosoft MSRC 2024-W46

Windows Registry Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43452

highMicrosoft MSRC 2024-W46

Windows Registry Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43641

highMicrosoft MSRC 2024-W46

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43631

mediumMicrosoft MSRC 2024-W46

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43646

mediumMicrosoft MSRC 2024-W46

Windows SMB Denial of Service Vulnerability

2024-11-12 CVE-2024-43642

highMicrosoft MSRC 2024-W46

Windows SMBv3 Server Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43447

highMicrosoft MSRC 2024-W46

Windows Task Scheduler Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49039

highMicrosoft MSRC 2024-W46

Windows Telephony Service Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43626

highMicrosoft MSRC 2024-W46

Windows Telephony Service Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43620

highMicrosoft MSRC 2024-W46

Windows Telephony Service Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43621

highMicrosoft MSRC 2024-W46