CVE-2024-43613

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

VendorProductVersions
MicrosoftAzure Database for PostgreSQL Flexible Server>= 16.4.0, < 16.4
MicrosoftAzure Database for PostgreSQL Flexible Server>= 15.8, < 15.8
MicrosoftAzure Database for PostgreSQL Flexible Server>= 14.13, < 14.13
MicrosoftAzure Database for PostgreSQL Flexible Server>= 13.16, < 13.16
MicrosoftAzure Database for PostgreSQL Flexible Server>= 12.20, < 12.20

References

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-436145.5Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.CVE-2024-436157.1Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityCVE-2024-436167.8Microsoft Office Remote Code Execution VulnerabilityCVE-2024-43625.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcoCVE-2024-436208.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2024-436218.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2024-436228.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2024-436237.8Windows NT OS Kernel Elevation of Privilege VulnerabilityCVE-2024-436248.8Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityCVE-2024-436258.1Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityCVE-2024-436267.8Windows Telephony Service Elevation of Privilege VulnerabilityCVE-2024-436278.8Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43613: High severity, CVSS 7.2 | Vulnix