Archive

10 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /10 January 2025 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.8

CVE-2024-49138 Exploited Public exploit EPSS 26%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 10, 2024
KEV Dec 10, 2024
High 7.5

CVE-2024-49113 Public exploit EPSS 84%

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 10, 2024
Critical 9.8

CVE-2024-49112 Public exploit EPSS 72%

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 10, 2024
High 8.8

CVE-2024-49117 Public exploit

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows

Dec 10, 2024
Critical 9.3

CVE-2024-54152 Public exploit

Angular Expressions - Remote Code Execution when using locals

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undis…

peerigon angular-expressions angular-expressions npm

Dec 10, 2024
High 8.6

CVE-2024-21542 Public exploit

luigi Arbitrary File Write via Archive Extraction (Zip Slip)

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

luigi PyPI

Dec 10, 2024