CVE-2024-38176 - GroupMe Elevation of Privilege Vulnerability

HIGH

GroupMe Elevation of Privilege Vulnerability

Published Jul 23, 2024

8.1

HIGH

CVSS 3.1

EPSS 0.92%

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints

No remediation recorded yet.

Weaknesses (1)

CWE-307

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38176		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner microsoft

Published Jul 23, 2024

Updated Feb 10, 2026

Reserved Jun 11, 2024

Updated Jul 24, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a