CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-38813 – Privilege escalation vulnerability
https://notcve.org/view.php?id=CVE-2024-38813
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet. • https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 • CWE-250: Execution with Unnecessary Privileges CWE-273: Improper Check for Dropped Privileges •
CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0CVE-2024-8766
https://notcve.org/view.php?id=CVE-2024-8766
Local privilege escalation due to DLL hijacking vulnerability. • https://security-advisory.acronis.com/advisories/SEC-7218 • CWE-427: Uncontrolled Search Path Element •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34016
https://notcve.org/view.php?id=CVE-2024-34016
Local privilege escalation due to DLL hijacking vulnerability. • https://security-advisory.acronis.com/advisories/SEC-7188 • CWE-427: Uncontrolled Search Path Element •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-44095
https://notcve.org/view.php?id=CVE-2024-44095
This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/pixel/2024-09-01 • CWE-783: Operator Precedence Logic Error •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-44094
https://notcve.org/view.php?id=CVE-2024-44094
This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/pixel/2024-09-01 • CWE-20: Improper Input Validation •