First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-28925

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Secure Boot Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Apr 9, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-289268.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289278.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289288.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-289298.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-28938.8A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function formSetDeviceName of t CVE-2024-289308.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289318.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289328.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289338.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289348.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289358.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2024-289368.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

CVE-2024-28925: High severity, CVSS 8.0 | Vulnix