First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-26190

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Microsoft QUIC Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-261918.8Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability CVE-2024-261928.2Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2024-261936.4Azure Migrate Remote Code Execution Vulnerability CVE-2024-261947.4Secure Boot Security Feature Bypass Vulnerability CVE-2024-261957.2DHCP Server Service Remote Code Execution Vulnerability CVE-2024-261964.3Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability CVE-2024-261976.5Windows Standards-Based Storage Management Service Denial of Service Vulnerability CVE-2024-261988.8Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2024-261997.8Microsoft Office Elevation of Privilege Vulnerability CVE-2024-26209.8A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affe CVE-2024-262008.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-262016.6Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

CVE-2024-26190: High severity, CVSS 7.5 | Vulnix