Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21383 State: PUBLISHED Published: 2024-01-26T00:29:30.925Z Last Updated: 2025-05-03T01:46:38.729Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-347 Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21383
CVE ID: CVE-2024-21384 State: PUBLISHED Published: 2024-02-13T18:02:44.116Z Last Updated: 2025-05-09T18:23:58.730Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021 Problem Types: CWE-416 Description: Microsoft Office OneNote Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384
CVE ID: CVE-2024-21385 State: PUBLISHED Published: 2024-01-26T00:29:31.482Z Last Updated: 2025-05-29T15:17:34.121Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-416 Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21385
CVE ID: CVE-2024-21386 State: PUBLISHED Published: 2024-02-13T18:02:20.218Z Last Updated: 2025-05-03T01:37:46.060Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: ASP.NET Core 6.0, ASP.NET Core 7.0, ASP.NET Core 8.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8 Problem Types: CWE-400 Description: .NET Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386
CVE ID: CVE-2024-21387 State: PUBLISHED Published: 2024-01-26T00:29:32.072Z Last Updated: 2025-05-03T01:46:39.923Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based), Microsoft Edge (Chromium-based) Extended Stable Problem Types: CWE-357 Description: Microsoft Edge for Android Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21387
CVE ID: CVE-2024-21388 State: PUBLISHED Published: 2024-01-30T17:23:24.876Z Last Updated: 2025-05-29T15:04:33.561Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-20 Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21388
CVE ID: CVE-2024-21389 State: PUBLISHED Published: 2024-02-13T18:02:20.755Z Last Updated: 2025-05-03T01:37:13.941Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21389
CVE ID: CVE-2024-21390 State: PUBLISHED Published: 2024-03-12T16:57:58.077Z Last Updated: 2025-05-03T00:46:55.838Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Authenticator Problem Types: CWE-287 Description: Microsoft Authenticator Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21390
CVE ID: CVE-2024-21391 State: PUBLISHED Published: 2024-02-13T18:02:44.606Z Last Updated: 2025-05-03T01:37:41.237Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Servi
n Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21391
CVE ID: CVE-2024-21392 State: PUBLISHED Published: 2024-03-12T16:57:42.012Z Last Updated: 2025-05-03T00:47:15.780Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.9, PowerShell 7.3, PowerShell 7.4, .NET 7.0, .NET 8.0, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.8 Problem Types: CWE-400 Description: .NET and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-2139
Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392
CVE ID: CVE-2024-21393 State: PUBLISHED Published: 2024-02-13T18:02:21.317Z Last Updated: 2025-05-03T01:37:14.553Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21393
CVE ID: CVE-2024-21394 State: PUBLISHED Published: 2024-02-13T18:02:21.915Z Last Updated: 2025-05-03T01:37:15.416Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Dynamics 365 Field Service Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21394
CVE ID: CVE-2024-21395 State: PUBLISHED Published: 2024-02-13T18:02:45.175Z Last Updated: 2025-05-03T01:37:41.914Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21395
CVE ID: CVE-2024-21396 State: PUBLISHED Published: 2024-02-13T18:02:22.505Z Last Updated: 2025-05-09T18:24:13.984Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Dynamics 365 Sales Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21396
CVE ID: CVE-2024-21397 State: PUBLISHED Published: 2024-02-13T18:02:45.742Z Last Updated: 2025-05-03T01:37:42.469Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure File Sync Problem Types: CWE-59 Description: Microsoft Azure File Sync Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21397
CVE ID: CVE-2024-21398 State: PUBLISHED Published: 2024-07-09T17:02:14.812Z Last Updated: 2025-10-14T22:12:56.134Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21398
CVE ID: CVE-2024-21399 State: PUBLISHED Published: 2024-02-02T00:08:22.570Z Last Updated: 2025-05-03T01:37:43.152Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-416 Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21399
CVE ID: CVE-2024-21400 State: PUBLISHED Published: 2024-03-12T16:57:58.625Z Last Updated: 2025-05-03T00:46:55.364Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Kubernetes Service Problem Types: CWE-22 Description: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21400
CVE ID: CVE-2024-21401 State: PUBLISHED Published: 2024-02-13T18:02:23.088Z Last Updated: 2025-05-03T01:37:16.696Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Entra Problem Types: CWE-284 Description: Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21401
CVE ID: CVE-2024-21402 State: PUBLISHED Published: 2024-02-13T18:02:23.656Z Last Updated: 2025-05-09T18:24:28.772Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: CWE-285 Description: Microsoft Outlook Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21402
CVE ID: CVE-2024-21403 State: PUBLISHED Published: 2024-02-13T18:02:46.888Z Last Updated: 2025-05-09T18:24:47.806Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Kubernetes Service Problem Types: CWE-552 Description: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21403
CVE ID: CVE-2024-21404 State: PUBLISHED Published: 2024-02-13T18:02:24.234Z Last Updated: 2025-05-03T01:37:46.567Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 7.0, .NET 8.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8 Problem Types: CWE-476 Description: .NET Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21404
CVE ID: CVE-2024-21405 State: PUBLISHED Published: 2024-02-13T18:02:47.423Z Last Updated: 2025-05-03T01:37:44.169Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service
indows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-591 Description: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/u
y Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21405
CVE ID: CVE-2024-21406 State: PUBLISHED Published: 2024-02-13T18:02:47.978Z Last Updated: 2025-05-08T15:40:28.681Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Se
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-319 Description: Windows Printing Service Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21406
CVE ID: CVE-2024-21407 State: PUBLISHED Published: 2024-03-12T16:57:59.197Z Last Updated: 2025-05-03T00:46:54.164Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Wind
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Windows Hyper-V Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407
CVE ID: CVE-2024-21408 State: PUBLISHED Published: 2024-03-12T16:57:59.748Z Last Updated: 2025-05-03T00:46:54.779Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-835 D
7, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-835 Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408
CVE ID: CVE-2024-21409 State: PUBLISHED Published: 2024-04-09T17:00:08.248Z Last Updated: 2025-05-03T00:40:32.661Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.9, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, PowerShell 7.3, PowerShell 7.4, PowerShell 7.2, .NET 6.0, .NET 7.0, .NET 8.0, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework
4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2 Problem Types: CWE-416 Description: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409
CVE ID: CVE-2024-21410 State: PUBLISHED Published: 2024-02-13T18:02:48.590Z Last Updated: 2025-10-21T23:05:24.615Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2019 Cumulative Update 14 Problem Types: CWE-287 Description: Microsoft Exchange Server Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410
CVE ID: CVE-2024-21411 State: PUBLISHED Published: 2024-03-12T16:57:42.580Z Last Updated: 2025-05-03T00:47:14.775Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Skype for Consumer Problem Types: CWE-453 Description: Skype for Consumer Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21411
CVE ID: CVE-2024-21412 State: PUBLISHED Published: 2024-02-13T18:02:49.184Z Last Updated: 2025-10-21T23:05:24.460Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 21H2, Windows 10 Version 1809, Windows 10 Version 21H2, Windows Server 2022, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2019, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2019 (Server Core installation) Problem Types: CWE-693 Description: Internet Shortcut Files Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichme
scription: Internet Shortcut Files Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412
CVE ID: CVE-2024-21413 State: PUBLISHED Published: 2024-02-13T18:02:24.799Z Last Updated: 2025-10-21T23:05:24.765Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2016 Problem Types: CWE-20 Description: Microsoft Outlook Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
CVE ID: CVE-2024-21414 State: PUBLISHED Published: 2024-07-09T17:02:15.377Z Last Updated: 2025-10-14T22:12:56.696Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21414
CVE ID: CVE-2024-21415 State: PUBLISHED Published: 2024-07-09T17:02:15.928Z Last Updated: 2025-10-14T22:12:57.290Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21415
CVE ID: CVE-2024-21416 State: PUBLISHED Published: 2024-09-10T16:54:09.926Z Last Updated: 2024-12-31T23:03:16.261Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2 Problem Types: CWE-122 Description: Windows TCP/IP Remote Code Execution Vulnerability Additional Analyst Notes: - CISA