dbcve.org
Vulnerability index

Browse CVEs

228 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Access ControlCWE-284 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Azure Stack Hub CRITICAL 9.0
CVE-2024-38220

Azure Stack Hub Elevation of Privilege Vulnerability

Fix: 1.2311.1.22+
Fix from $2,300 2024-09-10
Sql 2016 Azure Connect Feature Pack CRITICAL 9.8
CVE-2024-37341

Microsoft SQL Server Elevation of Privilege Vulnerability

Fix: 13.0.6441.1 / 13.0.7040.1+
Fix from $2,300 2024-09-10
Entra Id HIGH 7.5
CVE-2024-43477

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable …

Mitigation only
Fix from $1,950 2024-08-23
Azure Managed Instance For Apache Cassandra HIGH 8.8
CVE-2024-38175

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges ov…

Mitigation only
Fix from $1,950 2024-08-20
Windows 10 21h2 HIGH 7.8
CVE-2024-38163

Windows Update Stack Elevation of Privilege Vulnerability

Fix: 10.0.19041.3920 / 10.0.20348.2201+
Fix from $1,950 2024-08-14
Windows 10 1507 MEDIUM 6.8
CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

Fix: 10.0.10240.20751 / 10.0.14393.7259+
Fix from $1,600 2024-08-13
Azure Cyclecloud HIGH 7.8
CVE-2024-38195

Azure CycleCloud Remote Code Execution Vulnerability

Fix: 8.6.3+
Fix from $1,950 2024-08-13
Azure Connected Machine Agent HIGH 7.8
CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Fix: 1.44+
Fix from $1,950 2024-08-13
Windows 10 1607 HIGH 7.3
CVE-2024-38202

Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic use…

Patch available
Fix from $1,950 2024-08-08
Windows 10 1507 MEDIUM 6.7
CVE-2024-21302

Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtu…

Fix: 10.0.10240.20710 / 10.0.14393.7259+
Fix from $1,600 2024-08-08
Groupme HIGH 8.8
CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to…

Patch available
Fix from $1,950 2024-07-23
Windows Server 2016 HIGH 7.8
CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability

Fix: 10.0.14393.7159 / 10.0.17763.6054+
Fix from $1,950 2024-07-09
Windows 10 1507 HIGH 7.5
CVE-2024-38061

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

Fix: 10.0.10240.20710 / 10.0.14393.7159+
Fix from $1,950 2024-07-09
Visual Studio 2017 MEDIUM 6.7
CVE-2024-29060

Visual Studio Elevation of Privilege Vulnerability

Fix: 15.9.63 / 16.11.37+
Fix from $1,600 2024-06-11
Intune Mobile Application Management MEDIUM 5.5
CVE-2024-30059

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

Fix: 5.0.6215.0+
Fix from $1,600 2024-05-14
Azure Kubernetes Service Confidential Containers CRITICAL 9.0
CVE-2024-29990EPSS 18%

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Fix: 0.3.4+
Fix from $2,300 2024-04-09
Azure Cyclecloud HIGH 8.8
CVE-2024-29993

Azure CycleCloud Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2024-04-09
Defender For Iot HIGH 7.2
CVE-2024-29054

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Fix: 24.1.3+
Fix from $1,950 2024-04-09
Defender For Iot HIGH 7.2
CVE-2024-29055

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Fix: 24.1.3+
Fix from $1,950 2024-04-09
Azure Arc Extension Microsoft.azstackhci.operator MEDIUM 6.2
CVE-2024-28917

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

Fix: 0.3.0-preview / 1.0.2620-162+
Fix from $1,600 2024-04-09
Windows 10 1507 MEDIUM 6.7
CVE-2024-26234

Proxy Driver Spoofing Vulnerability

Fix: 10.0.10240.20596 / 10.0.14393.6897+
Fix from $1,600 2024-04-09
Azure Compute Gallery MEDIUM 6.5
CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability

No fix yet
Fix from $1,600 2024-04-09
Azure Data Studio HIGH 7.3
CVE-2024-26203

Azure Data Studio Elevation of Privilege Vulnerability

Fix: 1.48.0+
Fix from $1,950 2024-03-12
Intune Company Portal MEDIUM 6.6
CVE-2024-26201

Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

Fix: 1.2402.12+
Fix from $1,600 2024-03-12
Windows 10 1507 HIGH 7.8
CVE-2024-21436

Windows Installer Elevation of Privilege Vulnerability

Fix: 10.0.10240.20526 / 10.0.14393.6796+
Fix from $1,950 2024-03-12
Entra Jira Sso Plugin CRITICAL 9.8
CVE-2024-21401

Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

Fix: 1.1.2+
Fix from $2,300 2024-02-13
Azure Kubernetes Service CRITICAL 9.0
CVE-2024-21376

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

Patch available
Fix from $2,300 2024-02-13
Azure Site Recovery CRITICAL 9.3
CVE-2024-21364

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability

Patch available
Fix from $2,300 2024-02-13
Skype For Business Server MEDIUM 5.7
CVE-2024-20695

Skype for Business Information Disclosure Vulnerability

Patch available
Fix from $1,600 2024-02-13
Edge Chromium MEDIUM 6.3
CVE-2024-20675

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Fix: 120.0.2210.133+
Fix from $1,600 2024-01-11