CVE-2024-38259

HighCVSS 8.8/10Last modified Aug 10, 2026

Description

Microsoft Management Console Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2024
Last modified
Aug 10, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-38268.6In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionalityCVE-2024-382608.8Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382617.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382627.5Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382637.5Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382645.9Microsoft Virtual Hard Disk (VHDX) Denial of Service VulnerabilityCVE-2024-382658.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382664.9An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware vCVE-2024-382674.9An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware verCVE-2024-382684.9An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versCVE-2024-382694.9An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmwarCVE-2024-38275.4The Spectra Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block ids in all versions up to, and including, 1.1.4
CVE-2024-38259: High severity, CVSS 8.8 | Vulnix