Security Warnings — Week: 2024-W11

Microsoft SharePoint Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21426

highMicrosoft MSRC 2024-W11

Microsoft Teams for Android Information Disclosure Vulnerability

2024-03-12 CVE-2024-21448

mediumMicrosoft MSRC 2024-W11

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21441

highMicrosoft MSRC 2024-W11

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21444

highMicrosoft MSRC 2024-W11

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21450

highMicrosoft MSRC 2024-W11

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26161

highMicrosoft MSRC 2024-W11

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

2024-03-12 CVE-2024-26166

highMicrosoft MSRC 2024-W11

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21434

highMicrosoft MSRC 2024-W11

Mismatched Memory Management Routines in Wireshark

2024-03-12 CVE-2024-2955

highMicrosoft MSRC 2024-W11

net: mana: Fix TX CQE error handling

2024-03-12 CVE-2023-52532

mediumMicrosoft MSRC 2024-W11

netfs: Only call folio_start_fscache() one time for each folio

2024-03-12 CVE-2023-52582

mediumMicrosoft MSRC 2024-W11

NTFS Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21446

highMicrosoft MSRC 2024-W11

nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()

2024-03-12 CVE-2023-52508

mediumMicrosoft MSRC 2024-W11

ocfs2: Avoid touching renamed directory if parent does not change

2024-03-12 CVE-2023-52590

mediumMicrosoft MSRC 2024-W11

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21330

highMicrosoft MSRC 2024-W11

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21334

criticalMicrosoft MSRC 2024-W11

Outlook for Android Information Disclosure Vulnerability

2024-03-12 CVE-2024-26204

highMicrosoft MSRC 2024-W11

Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.

2024-03-12 CVE-2024-2606

lowMicrosoft MSRC 2024-W11

reiserfs: Avoid touching renamed directory if parent does not change

2024-03-12 CVE-2023-52591

highMicrosoft MSRC 2024-W11

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

2024-03-12 CVE-2023-45929

mediumMicrosoft MSRC 2024-W11

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

2024-03-12 CVE-2023-45927

mediumMicrosoft MSRC 2024-W11

sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

2024-03-12 CVE-2023-52629

highMicrosoft MSRC 2024-W11

Skype for Consumer Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21411

highMicrosoft MSRC 2024-W11

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21418

highMicrosoft MSRC 2024-W11

SonicWall Email Security: Schwachstelle ermöglicht Manipulation von Dateien

2024-03-12 CVE-2024-22398

mediumBSI 2024-W11

spmi: mediatek: Fix UAF on device remove

2024-03-12 CVE-2023-52584

lowMicrosoft MSRC 2024-W11

sysctl: Fix out of bounds access for empty sysctl registers

2024-03-12 CVE-2023-52596

mediumMicrosoft MSRC 2024-W11

thermal: intel: hfi: Add syscore callbacks for system-wide PM

2024-03-12 CVE-2024-26646

mediumMicrosoft MSRC 2024-W11

tracing: Ensure visibility when inserting an element into tracing_map

2024-03-12 CVE-2024-26645

mediumMicrosoft MSRC 2024-W11

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

2024-03-12 CVE-2024-1013

highMicrosoft MSRC 2024-W11

Verify panics on certificates with an unknown public key algorithm in crypto/x509

2024-03-12 CVE-2024-24783

mediumMicrosoft MSRC 2024-W11

Visual Studio Code Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26165

highMicrosoft MSRC 2024-W11

webpack-dev-middleware Path Traversal vulnerability

2024-03-12 CVE-2024-29180

highMicrosoft MSRC 2024-W11

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

2024-03-12 CVE-2023-52593

mediumMicrosoft MSRC 2024-W11

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

2024-03-12 CVE-2024-26160

mediumMicrosoft MSRC 2024-W11

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26170

highMicrosoft MSRC 2024-W11

Windows Compressed Folder Tampering Vulnerability

2024-03-12 CVE-2024-26185

mediumMicrosoft MSRC 2024-W11

Windows Error Reporting Service Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26169

highMicrosoft MSRC 2024-W11

Windows Graphics Component Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21437

highMicrosoft MSRC 2024-W11

Windows Hyper-V Denial of Service Vulnerability

2024-03-12 CVE-2024-21408

mediumMicrosoft MSRC 2024-W11

Windows Hyper-V Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21407

highMicrosoft MSRC 2024-W11

Windows Installer Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21436

highMicrosoft MSRC 2024-W11

Windows Kerberos Security Feature Bypass Vulnerability

2024-03-12 CVE-2024-21427

highMicrosoft MSRC 2024-W11

Windows Kernel Denial of Service Vulnerability

2024-03-12 CVE-2024-26181

mediumMicrosoft MSRC 2024-W11

Windows Kernel Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21443

highMicrosoft MSRC 2024-W11

Windows Kernel Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26173

highMicrosoft MSRC 2024-W11

Windows Kernel Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26176

highMicrosoft MSRC 2024-W11

Windows Kernel Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26178

highMicrosoft MSRC 2024-W11

Windows Kernel Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-26182

highMicrosoft MSRC 2024-W11

Windows Kernel Information Disclosure Vulnerability

2024-03-12 CVE-2024-26174

mediumMicrosoft MSRC 2024-W11

Windows Kernel Information Disclosure Vulnerability

2024-03-12 CVE-2024-26177

mediumMicrosoft MSRC 2024-W11

Windows OLE Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21435

highMicrosoft MSRC 2024-W11

Windows Print Spooler Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21433

highMicrosoft MSRC 2024-W11

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

2024-03-12 CVE-2024-26197

mediumMicrosoft MSRC 2024-W11

Windows Telephony Server Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21439

highMicrosoft MSRC 2024-W11

Windows Update Stack Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21432

highMicrosoft MSRC 2024-W11

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21430

mediumMicrosoft MSRC 2024-W11

Windows USB Hub Driver Remote Code Execution Vulnerability

2024-03-12 CVE-2024-21429

mediumMicrosoft MSRC 2024-W11

Windows USB Print Driver Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21442

highMicrosoft MSRC 2024-W11

Windows USB Print Driver Elevation of Privilege Vulnerability

2024-03-12 CVE-2024-21445

highMicrosoft MSRC 2024-W11