Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

HIGH Severity CVEs

CVSS 7.0 – 8.9

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

149,356
Total
381
Known Exploited
CRITICAL HIGH MEDIUM LOW
Showing 79,675 of 149,356 total · Page 962/1594
8.8
CVE-2024-49010

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49009

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49008

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49007

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49006

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49005

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49004

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49002

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49001

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-49000

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48999

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48998

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48997

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48996

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48995

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48994

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-48993

SQL Server Native Client Remote Code Execution Vulnerability

 7.8
CVE-2024-43644

Windows Client-Side Caching Elevation of Privilege Vulnerability

 7.5
CVE-2024-43642

Windows SMB Denial of Service Vulnerability

 7.8
CVE-2024-43641

Windows Registry Elevation of Privilege Vulnerability

 7.8
CVE-2024-43640

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

 7.8
CVE-2024-43636

Win32k Elevation of Privilege Vulnerability

 8.8
CVE-2024-43635

Windows Telephony Service Remote Code Execution Vulnerability

 7.8
CVE-2024-43630

Windows Kernel Elevation of Privilege Vulnerability

 7.8
CVE-2024-43629

Windows DWM Core Library Elevation of Privilege Vulnerability

 8.8
CVE-2024-43628

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

 7.8
CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

 8.1
CVE-2024-43625

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

 8.8
CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

 7.8
CVE-2024-43623

Windows NT OS Kernel Elevation of Privilege Vulnerability

 8.8
CVE-2024-43622

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43621

Windows Telephony Service Remote Code Execution Vulnerability

 8.8
CVE-2024-43620

Windows Telephony Service Remote Code Execution Vulnerability

 8.1
CVE-2024-43598

LightGBM Remote Code Execution Vulnerability

 7.8
CVE-2024-43530

Windows Update Stack Elevation of Privilege Vulnerability

 7.5
CVE-2024-43499

.NET and Visual Studio Denial of Service Vulnerability

 8.8
CVE-2024-43462

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability

 7.5
CVE-2024-43452

Windows Registry Elevation of Privilege Vulnerability

 7.5
CVE-2024-43450

Windows DNS Spoofing Vulnerability

 8.1
CVE-2024-43447

Windows SMBv3 Server Remote Code Execution Vulnerability

 8.8
CVE-2024-38255

SQL Server Native Client Remote Code Execution Vulnerability

 8.8
CVE-2024-21976

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le

 8.8
CVE-2024-21975

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le

 8.8
CVE-2024-21974

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially le

 7.3
CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve

7.3
CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve pr

 7.3
CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achiev

Frequently Asked Questions

What does HIGH severity mean for CVEs?

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

How many high severity CVEs exist?

There are 149,356 CVE records rated HIGH in our database. Of these, 381 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize high severity vulnerabilities?

HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.

Detect HIGH Vulnerabilities

CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.

Get Started