CVE-2024-34719

HIGH Year: 2024
CVSS v3 Score
8.4
High
Weakness Type
CWE-476
View all →

Vulnerability Description

In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Related Vulnerabilities

CVE-2011-1231

HIGH
CVSS:8.4(High)

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1...

CWE-4762011

CVE-2011-1881

HIGH
CVSS:8.4(High)

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1...

CWE-4762011

CVE-2021-1917

HIGH
CVSS:8.4(High)

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

CWE-4762021

CVE-2023-1355

HIGH
CVSS:8.4(High)

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.

CWE-4762023

CVE-2023-52817

HIGH
CVSS:8.4(High)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL In certain types of chips, such as VEGA20, reading the amdgp...

CWE-4762023

CVE-2016-5423

HIGH
CVSS:8.3(High)

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference a...

CWE-4762016