CVE archive

October 2024

Browse CVE records published in October 2024, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 3391 matching CVEs · Page 1 of 68.

Medium · CVSS 6.5

CVE-2024-9355: Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum. It is also possible to force a derived key to be all zeros instead of an unpredictable value. This may have follow-on implications for the Go TLS stack.

Published Oct 1, 2024 · Updated Aug 25, 2026

Medium · CVSS 6.5

CVE-2024-43481: Power BI Report Server Spoofing Vulnerability

Power BI Report Server Spoofing Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.9

CVE-2024-43612: Power BI Report Server Spoofing Vulnerability

Power BI Report Server Spoofing Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.1

CVE-2024-43582: Remote Desktop Protocol Server Remote Code Execution Vulnerability

Remote Desktop Protocol Server Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7

CVE-2024-43511: Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43527: Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43528: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43516: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 5.5

CVE-2024-43614: Microsoft Defender for Endpoint for Linux Spoofing Vulnerability

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-38179: Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 4.3

CVE-2024-43577: Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Published Oct 18, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43488: Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43611: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.6

CVE-2024-43579: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Published Oct 17, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43596: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Published Oct 17, 2024 · Updated Aug 19, 2026

High · CVSS 7.6

CVE-2024-43578: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Published Oct 17, 2024 · Updated Aug 19, 2026

Medium · CVSS 5.9

CVE-2024-43587: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Published Oct 17, 2024 · Updated Aug 19, 2026

High · CVSS 8.6

CVE-2024-38190: Power Platform Information Disclosure Vulnerability

Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.

Published Oct 15, 2024 · Updated Aug 19, 2026

High · CVSS 7.5

CVE-2024-38204: Imagine Cup site Information Disclosure Vulnerability

Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.

Published Oct 15, 2024 · Updated Aug 19, 2026

High · CVSS 7.4

CVE-2024-43610: Copilot Studio Information Disclosure Vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

Published Oct 9, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43583: Winlogon Elevation of Privilege Vulnerability

Winlogon Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 5.5

CVE-2024-43603: Visual Studio Collector Service Denial of Service Vulnerability

Visual Studio Collector Service Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43599: Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43593: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43592: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.7

CVE-2024-43591: Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43590: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43589: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 5.5

CVE-2024-43585: Code Integrity Guard Security Feature Bypass Vulnerability

Code Integrity Guard Security Feature Bypass Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.7

CVE-2024-43584: Windows Scripting Engine Security Feature Bypass Vulnerability

Windows Scripting Engine Security Feature Bypass Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.5

CVE-2024-43575: Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.3

CVE-2024-43574: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8 · CISA KEV

CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 5.6

CVE-2024-43571: Sudo for Windows Spoofing Vulnerability

Sudo for Windows Spoofing Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.4

CVE-2024-43570: Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.5

CVE-2024-43567: Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.5

CVE-2024-43565: Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 8.8

CVE-2024-43564: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43563: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.5

CVE-2024-43562: Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43561: Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43560: Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43559: Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43558: Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43557: Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43556: Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

Medium · CVSS 6.5

CVE-2024-43555: Windows Mobile Broadband Driver Denial of Service Vulnerability

Windows Mobile Broadband Driver Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.4

CVE-2024-43553: NT OS Kernel Elevation of Privilege Vulnerability

NT OS Kernel Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.3

CVE-2024-43552: Windows Shell Remote Code Execution Vulnerability

Windows Shell Remote Code Execution Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026

High · CVSS 7.8

CVE-2024-43551: Windows Storage Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Published Oct 8, 2024 · Updated Aug 19, 2026