CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/12/2024 |
| CVE-2024-41145 | CRÍTICO9.8 | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger t | 18/12/2024 |
| CVE-2024-41138 | CRÍTICO9.8 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start | 18/12/2024 |
| CVE-2024-39804 | CRÍTICO9.1 | A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerabl | 18/12/2024 |
| CVE-2024-49142 | ALTO7.8 | Microsoft Access Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49105 | ALTO8.4 | Remote Desktop Client Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49070 | ALTO7.4 | Microsoft SharePoint Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49069 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49068 | ALTO8.2 | Microsoft SharePoint Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-49065 | MEDIO5.5 | Microsoft Office Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49064 | MEDIO6.5 | Microsoft SharePoint Information Disclosure Vulnerability | 12/12/2024 |
| CVE-2024-49063 | ALTO8.4 | Microsoft/Muzic Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49062 | MEDIO6.5 | Microsoft SharePoint Information Disclosure Vulnerability | 12/12/2024 |
| CVE-2024-49059 | ALTO7.0 | Microsoft Office Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-49057 | ALTO8.1 | Microsoft Defender for Endpoint on Android Spoofing Vulnerability | 12/12/2024 |
| CVE-2024-43600 | ALTO7.8 | Microsoft Office Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-43594 | ALTO7.3 | Microsoft System Center Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-54138 | MEDIO6.1 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to explo | 06/12/2024 |