CVE-2024-38176

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published
Jul 23, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-381777.8Windows App Installer Spoofing VulnerabilityCVE-2024-381787.5Scripting Engine Memory Corruption VulnerabilityCVE-2024-381798.8Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege VulnerabilityCVE-2024-38185.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site ScriptingCVE-2024-381808.8Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2024-381829.8Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.CVE-2024-381839.8An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.CVE-2024-381847.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381857.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381867.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381877.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381887.1Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVE-2024-38176: High severity, CVSS 8.1 | Vulnix