58.507 CVE tracked
796 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.507 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-38248 | HIGH 7.0 | microsoft windows_10_21h2 Windows Storage Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2024-38246 | HIGH 7.0 | microsoft windows_10_21h2 Win32k Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2024-38201 | HIGH 7.0 | microsoft azure_stack_hub Azure Stack Hub Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2024-38158 | HIGH 7.0 | microsoft azure_iot_hub_device_client_sdk Azure IoT SDK Remote Code Execution Vulnerability | 0.4% | — |
| CVE-2024-38157 | HIGH 7.0 | microsoft azure_iot_hub_device_client_sdk Azure IoT SDK Remote Code Execution Vulnerability | 0.5% | — |
| CVE-2024-38137 | HIGH 7.0 | microsoft windows_10_21h2 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2024-38136 | HIGH 7.0 | microsoft windows_10_1809 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2024-38106 | HIGH 7.0 | microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 6.3% | |
| CVE-2024-38069 | HIGH 7.0 | microsoft windows_10_1507 Windows Enroll Engine Security Feature Bypass Vulnerability | 0.3% | — |
| CVE-2024-38022 | HIGH 7.0 | microsoft windows_10_1507 Windows Image Acquisition Elevation of Privilege Vulnerability | 0.6% | — |
| CVE-2024-36899 | HIGH 7.0 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpio_chrdev_release(), wat | 0.2% | — |
| CVE-2024-35986 | HIGH 7.0 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_supply frame-work is not really designed for there to be long living in kernel references to power_suppl | 0.2% | — |
| CVE-2024-35898 | HIGH 7.0 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() w | 0.2% | — |
| CVE-2024-35848 | HIGH 7.0 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another drive | 0.2% | — |
| CVE-2024-35265 | HIGH 7.0 | microsoft windows_10_1809 Windows Perception Service Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2024-34123 | HIGH 7.0 | adobe premiere_pro Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the appl | 0.3% | — |
| CVE-2024-30099 | HIGH 7.0 | microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 0.5% | — |
| CVE-2024-30090 | HIGH 7.0 | microsoft windows_10_1507 Microsoft Streaming Service Elevation of Privilege Vulnerability | 2.0% | — |
| CVE-2024-30088 | HIGH 7.0 | ransomware microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 68.2% | |
| CVE-2024-30084 | HIGH 7.0 | microsoft windows_10_1507 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 5.9% | — |
| CVE-2024-30033 | HIGH 7.0 | microsoft windows_10_21h2 Windows Search Service Elevation of Privilege Vulnerability | 1.0% | — |
| CVE-2024-27045 | HIGH 7.0 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' Tell snprintf() to store at most 10 bytes in the output buffer instead of 30. Fixes the below: drivers/gpu/drm/a | 0.3% | — |
| CVE-2024-26961 | HIGH 7.0 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the en | 0.2% | — |
| CVE-2024-26960 | HIGH 7.0 | debian debian_linux In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical window where swapoff() could run and teardown a swap_info_struct while a call to free_swap_a | 0.2% | — |
| CVE-2024-26930 | HIGH 7.0 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and aga | 0.2% | — |