CVE-2024-33066

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while redirecting log file to any file location with any file name.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Oct 7, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-330675.5Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driCVE-2024-330686.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330697.5Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.CVE-2024-33075.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attCVE-2024-330707.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330717.5Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.CVE-2024-330738.2Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.CVE-2024-330789.8Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code executionCVE-2024-33085.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's atCVE-2024-33095.4The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all vCVE-2024-331016.1A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrarCVE-2024-331025.4A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitra
CVE-2024-33066: Critical severity, CVSS 9.8 | Vulnix