First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-38029

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	>= 10.0.25398.0, < 10.0.25398.1189

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38029Patch, Vendor Advisory

Timeline

Published: Oct 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-38036.3A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects unknown code of the fi CVE-2024-380306.5Windows Themes Spoofing Vulnerability CVE-2024-380317.5Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability CVE-2024-380327.1Microsoft Xbox Remote Code Execution Vulnerability CVE-2024-380337.3PowerShell Elevation of Privilege Vulnerability CVE-2024-380347.8Windows Filtering Platform Elevation of Privilege Vulnerability CVE-2024-380365.4There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacke CVE-2024-380376.1There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to CVE-2024-380386.1There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 which may allow a remote, unauthenticated attacker to create CVE-2024-380395.4There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker t CVE-2024-38046.3A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue affects some unknown CVE-2024-380407.5There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to

CVE-2024-38029: High severity, CVSS 7.5 | Vulnix