First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-29054

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Defender for IoT	>= 22.0.0, < 24.1.3

References

Timeline

Published: Apr 9, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-290557.2Microsoft Defender for IoT Elevation of Privilege Vulnerability CVE-2024-290564.3Windows Authentication Elevation of Privilege Vulnerability CVE-2024-290574.3Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2024-290597.5.NET Framework Information Disclosure Vulnerability CVE-2024-29066.5Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.CVE-2024-290606.7Visual Studio Elevation of Privilege Vulnerability CVE-2024-290617.8Secure Boot Security Feature Bypass Vulnerability CVE-2024-290627.1Secure Boot Security Feature Bypass Vulnerability CVE-2024-290635.5Azure AI Search Information Disclosure Vulnerability CVE-2024-290645.5Windows Hyper-V Denial of Service Vulnerability CVE-2024-290667.2Windows Distributed File System (DFS) Remote Code Execution Vulnerability CVE-2024-290686.6In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-sys

CVE-2024-29054: High severity, CVSS 7.2 | Vulnix