Vulnerabilities
CVE inventory from Microsoft Defender Vulnerability Management.
Total10
Critical4
High6
Exploit available10
Open8
Verified0
🖥️ Top vulnerable software MDE software inventory - most affected products
High Windows 10/11 · 2 CVEs · CVSS 9.0
Critical xz 5.6.0/5.6.1 · 1 CVE · CVSS 10.0
High Windows Server 2016+ · 1 CVE · CVSS 7.8
High Windows 10/11/Server · 1 CVE · CVSS 7.8
Critical Palo Alto PAN-OS < 10.2.9 · 1 CVE · CVSS 10.0
High Multiple web servers · 1 CVE · CVSS 7.5
Critical Microsoft Windows 10/11/Server · 1 CVE · CVSS 9.8
High Microsoft Office · 1 CVE · CVSS 9.8
| CVE | Name | Severity | CVSS | Exploit | Exposure | Devices | Status | |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-3094 | xz-utils Backdoor (CVE-2024-3094) | Critical | 10.0 | Public Exploit | Medium | 2 | In Progress | View |
| CVE-2024-3400 | PAN-OS GlobalProtect Command Injection | Critical | 10.0 | Active Exploit | High | 1 | Open | View |
| CVE-2024-38063 | Windows TCP/IP Remote Code Execution Vulnerability | Critical | 9.8 | Active Exploit | High | 6 | Open | View |
| CVE-2024-21413 | Microsoft Outlook Remote Code Execution | High | 9.8 | Active Exploit | Medium | 8 | Failed | View |
| CVE-2024-21338 | Windows AppLocker Security Feature Bypass Vulnerability | Critical | 9.0 | Public Exploit | High | 5 | Open | View |
| CVE-2023-4863 | libwebp Heap Buffer Overflow (Chrome/Edge) | High | 8.8 | Public Exploit | Medium | 6 | Open | View |
| CVE-2024-29988 | SmartScreen Prompt Security Feature Bypass | High | 8.8 | Active Exploit | High | 6 | Open | View |
| CVE-2024-20653 | Windows Common Log File System Driver EoP | High | 7.8 | Public Exploit | Medium | 7 | Open | View |
| CVE-2024-26169 | Windows Error Reporting Service EoP | High | 7.8 | Active Exploit | Medium | 3 | Open | View |
| CVE-2023-44487 | HTTP/2 Rapid Reset DoS | High | 7.5 | Active Exploit | Medium | 4 | Open | View |
