Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 3361–3380 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

HighPublished 02 Dec 2024, 20:44 WIB

CVE-2024-53109

nommu: pass NULL argument to vma_iter_prealloc()

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu kernels cra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:44:41.622Z. Updated 2026-08-05T11:43:47.659Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:43 WIB

Official record

HighPublished 02 Dec 2024, 20:44 WIB

CVE-2024-53108

drm/amd/display: Adjust VSDB parser for replay feature

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN: [ 27.804016] BUG: KASA…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 3361 to 3380 of 3433.First page Next page

Published 2024-12-02T13:44:40.707Z. Updated 2026-08-05T11:43:46.603Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:43 WIB

Official record

HighPublished 02 Dec 2024, 20:44 WIB

CVE-2024-53107

fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. The "arg->vec_len * sizeof(struct page_region))" multiplication can lead to integer wra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:44:39.811Z. Updated 2026-08-05T11:43:45.543Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:43 WIB

Official record

HighPublished 02 Dec 2024, 20:44 WIB

CVE-2024-53106

ima: fix buffer overrun in ima_eventdigest_init_common

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_eventdigest_init() calls ima_eventdigest_init_common() with HASH_ALGO__LAST which is then used to access the array hash_digest_size[] leading to buffer overrun. Have a conditional st…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:44:39.117Z. Updated 2026-08-05T11:43:44.445Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:43 WIB

Official record

UnscoredPublished 02 Dec 2024, 20:44 WIB

CVE-2024-53105

mm: page_alloc: move mlocked flag clearance into free_pages_prepare()

In the Linux kernel, the following vulnerability has been resolved: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() Syzbot reported a bad page state problem caused by a page being freed using free_page() still having a mlocked flag at free_pages_prepare() stage: BUG: Bad page state in process…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:44:38.257Z. Updated 2026-05-11T20:50:55.969Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:50 WIB

Official record

HighPublished 02 Dec 2024, 20:43 WIB

CVE-2024-53730

WordPress April's Call Posts plugin <= 2.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in springthistle April's Call Posts aprils-call-posts allows Stored XSS.This issue affects April's Call Posts: from n/a through <= 2.1.1.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:43:30.246Z. Updated 2026-04-28T16:10:44.411Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:10 WIB

Official record

HighPublished 02 Dec 2024, 20:42 WIB

CVE-2024-53740

WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through < 2.9.1.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:42:04.362Z. Updated 2026-04-28T16:10:44.671Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:10 WIB

Official record

HighPublished 02 Dec 2024, 20:23 WIB

CVE-2024-12015

SQL Injection in WordPress Project Manager Plugin

The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T13:23:50.027Z. Updated 2024-12-02T19:18:41.867Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 02:18 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-43053

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:53.503Z. Updated 2024-12-03T04:55:42.097Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-43052

Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:52.423Z. Updated 2024-12-03T04:55:40.842Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-43050

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:51.326Z. Updated 2024-12-03T04:55:39.595Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-43049

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:50.243Z. Updated 2024-12-03T04:55:38.243Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-43048

Stack-based Buffer Overflow in Performance

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:49.110Z. Updated 2024-12-03T04:55:36.961Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33063

Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:47.904Z. Updated 2024-12-02T15:40:27.584Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated02 Dec 2024, 22:40 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33056

Buffer Over-read in MProc

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:46.431Z. Updated 2024-12-03T04:55:35.719Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

MedPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33053

Use After Free in Video

Memory corruption when multiple threads try to unregister the CVP buffer at the same time.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:44.972Z. Updated 2024-12-03T04:55:47.167Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

HighPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33044

Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:43.847Z. Updated 2024-12-03T04:55:34.319Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

MedPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33040

Use After Free in Camera Driver

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:42.745Z. Updated 2024-12-03T04:55:45.919Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

MedPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33039

Untrusted Pointer Dereference in Audio

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:41.589Z. Updated 2024-12-03T04:55:44.526Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated03 Dec 2024, 11:55 WIB

Official record

MedPublished 02 Dec 2024, 17:18 WIB

CVE-2024-33037

Buffer Over-read in Neural Processing Unit

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-02T10:18:40.468Z. Updated 2024-12-02T15:43:14.290Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated02 Dec 2024, 22:43 WIB

Official record