Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

HIGH Severity CVEs

CVSS 7.0 – 8.9

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

149,356
Total
381
Known Exploited
Showing 79,675 of 149,356 total · Page 961/1594
7.8
CVE-2024-47428

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result

7.8
CVE-2024-47427

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result

7.8
CVE-2024-47426

Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbit

8.8
CVE-2024-2208

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research

8.1
CVE-2024-8535

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must

8.1
CVE-2024-8534

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appli

7.1
CVE-2024-7516

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Ser

7.3
CVE-2024-51721

A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earli

7.2
CVE-2024-49042

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

7.8
CVE-2024-47452

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr

7.8
CVE-2024-47451

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr

7.8
CVE-2024-47450

Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

7.8
CVE-2024-47443

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result

7.8
CVE-2024-47442

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result

7.8
CVE-2024-47441

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result

7.8
CVE-2024-45114

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr

7.2
CVE-2024-43613

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

7.5
CVE-2024-40592

An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version

8.2
CVE-2024-36513

A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.

7.3
CVE-2024-36507

A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 thr

7.5
CVE-2024-23666

A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 t

8.0
CVE-2024-8069 KEV

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attac

8.0
CVE-2024-8068 KEV

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated u

7.3
CVE-2024-49056

Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privil

7.8
CVE-2024-49051

Microsoft PC Manager Elevation of Privilege Vulnerability

8.8
CVE-2024-49050

Visual Studio Code Python Extension Remote Code Execution Vulnerability

7.1
CVE-2024-49049

Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

8.1
CVE-2024-49048

TorchGeo Remote Code Execution Vulnerability

7.8
CVE-2024-49046

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

7.8
CVE-2024-49043

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

7.5
CVE-2024-49040

Microsoft Exchange Server Spoofing Vulnerability

8.8
CVE-2024-49039 KEV

Windows Task Scheduler Elevation of Privilege Vulnerability

7.5
CVE-2024-49033

Microsoft Word Security Feature Bypass Vulnerability

7.8
CVE-2024-49032

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8
CVE-2024-49031

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8
CVE-2024-49030

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-49029

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-49028

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-49027

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-49026

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2024-49021

Microsoft SQL Server Remote Code Execution Vulnerability

7.8
CVE-2024-49019

Active Directory Certificate Services Elevation of Privilege Vulnerability

8.8
CVE-2024-49018

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49017

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49016

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49015

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49014

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49013

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49012

SQL Server Native Client Remote Code Execution Vulnerability

8.8
CVE-2024-49011

SQL Server Native Client Remote Code Execution Vulnerability

Frequently Asked Questions

What does HIGH severity mean for CVEs?

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

How many high severity CVEs exist?

There are 149,356 CVE records rated HIGH in our database. Of these, 381 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize high severity vulnerabilities?

HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.

Detect HIGH Vulnerabilities

CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.

Get Started