First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-20654

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Microsoft ODBC Driver Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Jan 9, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-206556.6Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability CVE-2024-206567.8Visual Studio Elevation of Privilege Vulnerability CVE-2024-206577.0Windows Group Policy Elevation of Privilege Vulnerability CVE-2024-206587.8Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability CVE-2024-206597.1Windows Hyper-V Security Feature Bypass Vulnerability CVE-2024-20666.1A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown pa CVE-2024-206606.5Microsoft Message Queuing Information Disclosure Vulnerability CVE-2024-206617.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability CVE-2024-206624.9Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability CVE-2024-206636.5Windows Message Queuing Client (MSMQC) Information Disclosure CVE-2024-206646.5Microsoft Message Queuing Information Disclosure Vulnerability CVE-2024-206656.7BitLocker Security Feature Bypass Vulnerability

CVE-2024-20654: High severity, CVSS 8.0 | Vulnix