Security Warnings — Week: 2024-W46

Mariner

2024-11-12 CVE-2024-23744

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-23775

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-26596

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-28834

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-28835

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-28960

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-30166

criticalMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-30202

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-30203

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-43790

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-45157

mediumMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-45159

criticalMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-49966

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-49967

highMicrosoft MSRC 2024-W46

Mariner

2024-11-12 CVE-2024-8006

mediumMicrosoft MSRC 2024-W46

mctp i2c: handle NULL header address

2024-11-12 CVE-2024-53043

mediumMicrosoft MSRC 2024-W46

media: ar0521: don't overflow when checking PLL values

2024-11-12 CVE-2024-53081

mediumMicrosoft MSRC 2024-W46

media: av7110: fix a spectre vulnerability

2024-11-12 CVE-2024-50289

mediumMicrosoft MSRC 2024-W46

media: s5p-jpeg: prevent buffer overflows

2024-11-12 CVE-2024-53061

highMicrosoft MSRC 2024-W46

Metabase GeoJSON API Local File Inclusion Vulnerability

2024-11-12 CVE-2021-41277

highMetabase CVE 2024-W46

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49052

highMicrosoft MSRC 2024-W46

Microsoft Copilot Studio Elevation Of Privilege Vulnerability

2024-11-12 CVE-2024-49038

criticalMicrosoft MSRC 2024-W46

Microsoft Dynamics 365 Sales Spoofing Vulnerability

2024-11-12 CVE-2024-49053

highMicrosoft MSRC 2024-W46

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

2024-11-12 CVE-2024-49025

mediumMicrosoft MSRC 2024-W46

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-11-12 CVE-2024-49054

mediumMicrosoft MSRC 2024-W46

Microsoft Excel Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49026

highMicrosoft MSRC 2024-W46

Microsoft Excel Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49027

highMicrosoft MSRC 2024-W46

Microsoft Excel Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49028

highMicrosoft MSRC 2024-W46

Microsoft Excel Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49029

highMicrosoft MSRC 2024-W46

Microsoft Excel Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49030

highMicrosoft MSRC 2024-W46

Microsoft Exchange Server Spoofing Vulnerability

2024-11-12 CVE-2024-49040

highMicrosoft MSRC 2024-W46

Microsoft Office Graphics Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49031

highMicrosoft MSRC 2024-W46

Microsoft Office Graphics Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49032

highMicrosoft MSRC 2024-W46

Microsoft PC Manager Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49051

highMicrosoft MSRC 2024-W46

Microsoft SQL Server Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49021

highMicrosoft MSRC 2024-W46

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

2024-11-12 CVE-2024-38264

mediumMicrosoft MSRC 2024-W46

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

2024-11-12 CVE-2024-43451

highMicrosoft CVE 2024-W46

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

2024-11-12 CVE-2024-49039

criticalMicrosoft CVE 2024-W46

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-43625

highMicrosoft MSRC 2024-W46

Microsoft Word Security Feature Bypass Vulnerability

2024-11-12 CVE-2024-49033

highMicrosoft MSRC 2024-W46

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49043

highMicrosoft MSRC 2024-W46

mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

2024-11-12 CVE-2024-50252

mediumMicrosoft MSRC 2024-W46

mm: krealloc: Fix MTE false alarm in __do_krealloc

2024-11-12 CVE-2024-53097

mediumMicrosoft MSRC 2024-W46

mm: resolve faulty mmap_region() error path behaviour

2024-11-12 CVE-2024-53096

highMicrosoft MSRC 2024-W46

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruptio

2024-11-12 CVE-2024-36623

highMicrosoft MSRC 2024-W46

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

2024-11-12 CVE-2024-36620

mediumMicrosoft MSRC 2024-W46

moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLa

2024-11-12 CVE-2024-36621

mediumMicrosoft MSRC 2024-W46

mptcp: handle consistently DSS corruption

2024-11-12 CVE-2024-50185

mediumMicrosoft MSRC 2024-W46

mptcp: init: protect sched with rcu_read_lock

2024-11-12 CVE-2024-53047

mediumMicrosoft MSRC 2024-W46

net: enetc: allocate vf_state during PF probes

2024-11-12 CVE-2024-50298

mediumMicrosoft MSRC 2024-W46

net: explicitly clear the sk pointer, when pf->create fails

2024-11-12 CVE-2024-50186

highMicrosoft MSRC 2024-W46

net: fix crash when config small gso_max_size/gso_ipv4_max_size

2024-11-12 CVE-2024-50258

mediumMicrosoft MSRC 2024-W46

net: sched: fix use-after-free in taprio_change()

2024-11-12 CVE-2024-50127

highMicrosoft MSRC 2024-W46

net: sched: use RCU read-side critical section in taprio_dump()

2024-11-12 CVE-2024-50126

highMicrosoft MSRC 2024-W46

net: systemport: fix potential memory leak in bcm_sysport_xmit()

2024-11-12 CVE-2024-50171

mediumMicrosoft MSRC 2024-W46

net: vertexcom: mse102x: Fix possible double free of TX skb

2024-11-12 CVE-2024-50276

highMicrosoft MSRC 2024-W46

net: wwan: fix global oob in wwan_rtnl_policy

2024-11-12 CVE-2024-50128

highMicrosoft MSRC 2024-W46

net/mlx5: Fix command bitmask initialization

2024-11-12 CVE-2024-50147

mediumMicrosoft MSRC 2024-W46

net/mlx5: Unregister notifier on eswitch init failure

2024-11-12 CVE-2024-50136

mediumMicrosoft MSRC 2024-W46

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

2024-11-12 CVE-2024-53057

highMicrosoft MSRC 2024-W46