CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2024-43459 – SQL Server Native Client Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-43459
SQL Server Native Client Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43459 • CWE-416: Use After Free •
CVSS: 5.9EPSS: 0%CPEs: 10EXPL: 0CVE-2024-38264 – Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-38264
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38264 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2024-38255 – SQL Server Native Client Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-38255
SQL Server Native Client Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38255 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0CVE-2024-43452 – Windows Registry Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-43452
Windows Registry Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43452 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 6.5EPSS: 0%CPEs: 37EXPL: 0CVE-2024-43451 – Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451 • CWE-73: External Control of File Name or Path •