Security Vulnerabilities - CVEs Published In November 2024
Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.
CVSS Score
7.3
EPSS Score
0.01
Published
2024-11-12
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.004
Published
2024-11-12
TorchGeo Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.012
Published
2024-11-12
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.004
Published
2024-11-12
Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.012
Published
2024-11-12
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability
Known exploited
CVSS Score
8.8
EPSS Score
0.137
Published
2024-11-12
Microsoft Exchange Server Spoofing Vulnerability
CVSS Score
7.5
EPSS Score
0.077
Published
2024-11-12
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.006
Published
2024-11-12
Visual Studio Elevation of Privilege Vulnerability
CVSS Score
6.7
EPSS Score
0.007
Published
2024-11-12
Microsoft Excel Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2024-11-12