CVE-2024-24916

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Jun 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-249198.6Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled wit CVE-2024-24925.4The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all ver CVE-2024-249207.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249217.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corrupt CVE-2024-249227.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write CVE-2024-249237.8A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affecte CVE-2024-249247.8A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write CVE-2024-249257.8A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized CVE-2024-249268.8Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affe CVE-2024-249276.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnitedThemes Brooklyn | Creative Multi CVE-2024-249285.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arunas Liuiza Content Cards allows Sto CVE-2024-249298.8Cross-Site Request Forgery (CSRF) vulnerability in Ryan Duff, Peter Westwood WP Contact Form.This issue affects WP Contact Form: from n/a th