VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.

01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

18,030 guide candidatesPage 1290 of 1503

Review reviewHighFixed-version data

CVE-2024-39487

Linux Linux, linux kernel

Affected: >= f9de11a165943a55e0fbda714caf60eaeb276a42 < 6a8a4fd082c439e19fede027e80c79bc4c84bb8e, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < 6b21346b399fd1336fe59233a17eb5ce73041ee1, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < 707c85ba3527ad6aa25552033576b0f1ff835d7b, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < bfd14e5915c2669f292a31d028e75dcd82f1e7e9, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < c8eb8ab9a44ff0e73492d0a12a643c449f641a9f, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < b75e33eae8667084bd4a63e67657c6a5a0f8d1e8, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < 9f835e48bd4c75fdf6a9cff3f0b806a7abde78da, >= f9de11a165943a55e0fbda714caf60eaeb276a42 < e271ff53807e8f2c628758290f0e499dbe51cb3d, >= 3.13 < 4.19.318, >= 4.20 < 5.4.280, >= 5.5 < 5.10.222, >= 5.11 < 5.15.163, >= 5.16 < 6.1.98, >= 6.2 < 6.6.39, >= 6.7 < 6.9.9, 6.10
Fixed: 4.19.318, 5.4.280, 5.10.222, 5.15.163, 6.1.98, 6.6.39, 6.9.9

Review reviewHighFixed-version data

CVE-2024-4944

WatchGuard SSLVPN Client, mobile_vpn_with_ssl, mobile vpn with ssl

Affected: >= 12.0 < 12.10.4
Fixed: 12.10.4

Review reviewHighFixed-version data

CVE-2024-39486

Linux Linux, linux kernel

Affected: >= 031ddd28008971cce0b5626379b910d0a05fb4dd < 16682588ead4a593cf1aebb33b36df4d1e9e4ffa, >= 1c7a387ffef894b1ab3942f0482dac7a6e0a909c < 0acce2a5c619ef1abdee783d7fea5eac78ce4844, >= 1c7a387ffef894b1ab3942f0482dac7a6e0a909c < 4f2a129b33a2054e62273edd5a051c34c08d96e9, >= 6.6.9 < 6.6.37, >= 6.7 < 6.9.8, 6.10
Fixed: 6.6.37, 6.9.8

Review reviewHighFixed-version data

CVE-2024-39480

Linux Linux, linux_kernel, linux kernel

Affected: >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < fb824a99e148ff272a53d71d84122728b5f00992, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < ddd2972d8e2dee3b33e8121669d55def59f0be8a, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < cfdc2fa4db57503bc6d3817240547c8ddc55fa96, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < f636a40834d22e5e3fc748f060211879c056cd33, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < 33d9c814652b971461d1e30bead6792851c209e7, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < 107e825cc448b7834b31e8b1b3cf0f57426d46d5, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < f694da720dcf795dc3eb97bf76d220213f76aaa7, >= 5d5314d6795f3c1c0f415348ff8c51f7de042b77 < e9730744bf3af04cda23799029342aa3cddbc454, >= 2.6.35, >= 1da177e4c3f4 < fb824a99e148, >= 1da177e4c3f4 < ddd2972d8e2d, >= 1da177e4c3f4 < cfdc2fa4db57, >= 1da177e4c3f4 < f636a40834d2, >= 1da177e4c3f4 < 33d9c814652b, >= 1da177e4c3f4 < 107e825cc448, >= 1da177e4c3f4 < f694da720dcf, >= 1da177e4c3f4 < e9730744bf3a, >= 4.19 < 4.19.316, >= 5.4 < 5.4.278, >= 5.10 < 5.10.219
Fixed: 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.94, 6.6.34, 6.9.5

Review reviewHighFixed-version data

CVE-2022-25480

rtsper_pcie_card_reader_driver, rtsper

Affected: < 10.0.22000.21355, < 10.0.22000.31274
Fixed: 10.0.22000.21355, 10.0.22000.31274

Review reviewHighFixed-version data

CVE-2022-25478

rtsper, rtsuer

Affected: < 10.0.22000.21355, < 10.0.22000.31274
Fixed: 10.0.22000.21355, 10.0.22000.31274

Known exploitedMediumFixed-version data

CVE-2024-39891

Twilio Authy

Affected: < 26.1.0, < 25.1.0
Fixed: 26.1.0, 25.1.0

Known exploitedCriticalFixed-version data

CVE-2024-38475

Apache HTTP Server

Affected: 2.4.0, >= 2.4.0 < 2.4.60, < 10.2.1.14-75sv
Fixed: 2.4.60, 10.2.1.14-75sv

Known exploitedMediumResearch in progress

CVE-2024-20399

Cisco NX-OS

Affected: 8.2(5), 7.3(6)N1(1a), 7.3(5)D1(1), 8.4(2), 7.3(6)N1(1), 6.2(2), 8.4(3), 9.2(3), 7.0(3)I5(2), 8.2(1), 6.0(2)A8(7a), 7.0(3)I4(5), 6.0(2)A6(1), 7.3(1)D1(1), 6.2(14a), 7.0(3)I4(6), 7.3(4)N1(1), 7.0(3)I4(3), 9.2(2v), 6.0(2)A6(5b)
Fixed: No verified fixed-version field is available yet

Known exploitedCriticalFixed-version data

CVE-2024-36401

OSGeo GeoServer

Affected: < 2.22.6, 2.24.0, 2.25.0, >= 2.23.0 < 2.23.6, >= 2.24.0 < 2.24.4, >= 2.25.0 < 2.25.2, < 29.6, >= 30.1 < 30.4, >= 31.1 < 31.2, 30.0, 31.0
Fixed: 2.22.6, 2.23.6, 2.24.4, 2.25.2, 29.6, 30.4, 31.2

Priority reviewCriticalResearch in progress

CVE-2024-6127

BC Security Empire, empire

Affected: < 5.9.3
Fixed: No verified fixed-version field is available yet

Review reviewCriticalResearch in progress

CVE-2024-35260

Microsoft Microsoft Power Platform, power platform

Affected: See the vendor advisory and NVD configuration data
Fixed: No verified fixed-version field is available yet