CVE-2024-38178

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Scripting Engine Memory Corruption Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Aug 13, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-381798.8Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege VulnerabilityCVE-2024-38185.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site ScriptingCVE-2024-381808.8Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2024-381829.8Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.CVE-2024-381839.8An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.CVE-2024-381847.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381857.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381867.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381877.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-381887.1Azure Network Watcher VM Agent Elevation of Privilege VulnerabilityCVE-2024-381898.8Microsoft Project Remote Code Execution VulnerabilityCVE-2024-38195.4The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit - Banner widget in all version
CVE-2024-38178: High severity, CVSS 7.5 | Vulnix