Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-38514 | CVE-2024-38514 | HIGH | N/A | 2.17% | cvelistv5 | |
| cve-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability | HIGH | N/A | 99.96% | cvelistv5 | 2025-05-01 |
| cve-2024-38289 | CVE-2024-38289 | CRITICAL | 9.8 | 40.61% | cvelistv5 | |
| cve-2024-38226 | Microsoft Publisher Protection Mechanism Failure Vulnerability | HIGH | 7.3 | 2.67% | cvelistv5 | 2024-09-10 |
| cve-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | MEDIUM | 5.4 | 10.03% | cvelistv5 | 2024-09-10 |
| cve-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 13.63% | cvelistv5 | 2024-08-13 |
| cve-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | HIGH | 7.8 | 28.53% | cvelistv5 | 2024-08-13 |
| cve-2024-38189 | Microsoft Project Remote Code Execution Vulnerability | HIGH | 8.8 | 8.19% | cvelistv5 | 2024-08-13 |
| cve-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | HIGH | 7.5 | 41.38% | cvelistv5 | 2024-08-13 |
| cve-2024-38112 | Microsoft Windows MSHTML Platform Spoofing Vulnerability | HIGH | 7.5 | 84.23% | cvelistv5 | 2024-07-09 |
| cve-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | HIGH | 7.8 | 1.64% | cvelistv5 | 2024-08-13 |
| cve-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability | HIGH | 7.0 | 6.34% | cvelistv5 | 2024-08-13 |
| cve-2024-38094 | Microsoft SharePoint Deserialization Vulnerability | HIGH | 7.2 | 50.89% | cvelistv5 | 2024-10-22 |
| cve-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | HIGH | 7.8 | 7.12% | cvelistv5 | 2024-07-09 |
| cve-2024-38014 | Microsoft Windows Installer Improper Privilege Management Vulnerability | HIGH | 7.8 | 6.26% | cvelistv5 | 2024-09-10 |
| cve-2024-37393 | CVE-2024-37393 | CRITICAL | 9.8 | 3.30% | cvelistv5 | |
| cve-2024-37383 | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | HIGH | N/A | 73.30% | cvelistv5 | 2024-10-24 |
| cve-2024-3721 | CVE-2024-3721 | MEDIUM | 6.5 | 86.49% | cvelistv5 | |
| cve-2024-37085 | VMware ESXi Authentication Bypass Vulnerability | MEDIUM | 6.8 | 26.77% | cvelistv5 | 2024-07-30 |
| cve-2024-37079 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | CRITICAL | 9.8 | 22.38% | cvelistv5 | 2026-01-23 |
| cve-2024-37032 | SUSE CVE CVE-2024-37032 | UNKNOWN | N/A | 89.63% | cvelistv5 | 2026-08-26 |
| cve-2024-37014 | Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script. | CRITICAL | 9.8 | 63.67% | cvelistv5 | 2026-06-17 |
| cve-2024-36991 | CVE-2024-36991 | HIGH | 7.5 | 13.01% | cvelistv5 | |
| cve-2024-36971 | SUSE CVE CVE-2024-36971 | HIGH | 7.0 | 2.70% | cvelistv5 | 2026-09-02 |
| cve-2024-36858 | CVE-2024-36858 | CRITICAL | 9.8 | 3.03% | cvelistv5 | |
| cve-2024-36857 | CVE-2024-36857 | HIGH | 7.5 | 2.05% | cvelistv5 | |
| cve-2024-36420 | CVE-2024-36420 | HIGH | 7.5 | 1.78% | cvelistv5 | |
| cve-2024-36401 | OSGeo GeoServer GeoTools Eval Injection Vulnerability | CRITICAL | 9.8 | 99.81% | cvelistv5 | 2024-07-15 |
| cve-2024-36111 | CVE-2024-36111 | MEDIUM | 6.3 | 8.39% | cvelistv5 | |
| cve-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | HIGH | 7.8 | 25.03% | cvelistv5 | 2024-12-16 |