Microsoft Windows - 14515 CVEs (Page 18/121)

About “Microsoft Windows”

A curated feed of “Microsoft Windows”-related CVEs appears below. We currently track 14515 CVEs for this tag (all time). In the last 365 days, 1681 were published. Average CVSS is 7.3 (all time; 7.2 over 365d), and 66% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-416 - Use After Free, CWE-122 - Heap-based Buffer Overflow, CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition').

In our taxonomy this topic maps to a MODERATE impact class. Issues here typically affect operating system packages or kernels. Plan reboots or service restarts and coordinate rollouts across fleets. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2025-02-11

Low

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVSS: 3.3 CWE: CWE-284 - Improper Access Control View on NVD

High

CVE-2025-21208

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21201

Windows Telephony Server Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-415 - Double Free View on NVD

High

CVE-2025-21200

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21190

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21184

Windows Core Messaging Elevation of Privileges Vulnerability

CVSS: 7.0 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21183

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVSS: 7.4 CWE: CWE-415 - Double Free View on NVD

High

CVE-2025-21182

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVSS: 7.4 CWE: CWE-415 - Double Free View on NVD

Medium

CVE-2024-40586

An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiS…

CVSS: 6.7 CWE: CWE-284 - Improper Access Control View on NVD

Medium

CVE-2025-24870

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege esc…

CVSS: 6.0 CWE: CWE-921 - Storage of Sensitive Data in a Mechanism without Access Control View on NVD

2025-02-10

Medium

CVE-2025-25193

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a…

CVSS: 5.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2025-1193

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communi…

CVSS: 8.1 CWE: CWE-295 - Improper Certificate Validation View on NVD

2025-02-06

Medium

CVE-2024-13614

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Securi…

CVSS: 5.3 CWE: CWE-190 - Integer Overflow or Wraparound View on NVD

Medium

CVE-2025-24845

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted da…

CVSS: 5.5 CWE: CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') View on NVD

Medium

CVE-2025-24483

NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system w…

CVSS: 5.5 CWE: CWE-476 - NULL Pointer Dereference View on NVD

High

CVE-2025-23236

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product…

CVSS: 8.8 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

High

CVE-2025-22894

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of t…

CVSS: 8.8 CWE: CWE-422 - Unprotected Windows Messaging Channel ('Shatter') View on NVD

High

CVE-2025-20094

CVSS: 8.8 CWE: CWE-422 - Unprotected Windows Messaging Channel ('Shatter') View on NVD

High

CVE-2025-22890

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system wher…

CVSS: 8.8 CWE: CWE-250 - Execution with Unnecessary Privileges View on NVD

2025-02-05

Medium

CVE-2025-24805

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privi…

CVSS: 5.5 CWE: CWE-269 - Improper Privilege Management View on NVD

Medium

CVE-2025-24804

CVSS: 4.3 CWE: CWE-1287 - Improper Validation of Specified Type of Input View on NVD

Medium

CVE-2025-24803

CVSS: 5.4 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Low

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connecti…

CVSS: 3.1 CWE: CWE-345 - Insufficient Verification of Data Authenticity View on NVD

2025-02-04

Medium

CVE-2025-1019

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox…

CVSS: 4.3 CWE: CWE-1021 - Improper Restriction of Rendered UI Layers or Frames View on NVD

Medium

CVE-2025-1013

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability was fixed in Firefox 135, Fi…

CVSS: 6.5 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2025-02-03

High

CVE-2024-35177

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based env…

CVSS: 7.8 CWE: CWE-284 - Improper Access Control View on NVD

2025-02-02

Medium

CVE-2024-0131

NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability…

CVSS: 4.4 CWE: CWE-805 - Buffer Access with Incorrect Length Value View on NVD

2025-01-31

Medium

CVE-2025-24831

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

CVSS: 6.6 CWE: CWE-428 - Unquoted Search Path or Element View on NVD

Medium

CVE-2025-24830

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

CVSS: 6.3 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2025-24829

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

CVSS: 6.3 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2025-24828

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

CVSS: 6.3 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2025-24827

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.

CVSS: 6.3 CWE: CWE-426 - Untrusted Search Path View on NVD

2025-01-30

Medium

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.

CVSS: 4.6 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2025-23007

A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation.

CVSS: 5.5 CWE: CWE-269 - Improper Privilege Management View on NVD

2025-01-29

High

CVE-2025-24789

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC…

CVSS: 7.8 CWE: CWE-426 - Untrusted Search Path View on NVD

2025-01-28

Medium

CVE-2025-24826

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4625.

CVSS: 6.7 CWE: CWE-276 - Incorrect Default Permissions View on NVD

High

CVE-2025-24479

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privi…

CVSS: 8.6 CWE: CWE-863 - Incorrect Authorization View on NVD

High

CVE-2025-0065

Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Win…

CVSS: 7.8 CWE: CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') View on NVD

Medium

CVE-2025-23084

A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows…

CVSS: 5.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

High

CVE-2024-0150

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead…

CVSS: 7.1 CWE: CWE-787 - Out-of-bounds Write View on NVD

Medium

CVE-2024-0147

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering.

CVSS: 5.5 CWE: CWE-416 - Use After Free View on NVD

2025-01-27

Medium

CVE-2025-0733

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search…

CVSS: 4.5 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2025-0732

A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipul…

CVSS: 4.5 CWE: CWE-426 - Untrusted Search Path View on NVD

Medium

CVE-2024-52012

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload"…

CVSS: 5.4 CWE: CWE-23 - Relative Path Traversal View on NVD

2025-01-24

Medium

CVE-2024-45077

IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of add…

CVSS: 6.5 CWE: CWE-98 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') View on NVD

High

CVE-2024-9495

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted i…

CVSS: 8.6 CWE: CWE-427 - Uncontrolled Search Path Element View on NVD

2025-01-22

High

CVE-2025-0651

Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudfla…

CVSS: 7.1 CWE: CWE-269 - Improper Privilege Management View on NVD

High

CVE-2024-55957

In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due t…

CVSS: 7.8 CWE: CWE-276 - Incorrect Default Permissions View on NVD

Medium

CVE-2024-42013

In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in m…

CVSS: 6.4 CWE: CWE-863 - Incorrect Authorization View on NVD

Medium

CVE-2024-42012

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows ad…

CVSS: 5.7 CWE: CWE-522 - Insufficiently Protected Credentials View on NVD

2025-01-21

Medium

CVE-2024-37284

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing…

CVSS: 5.5 CWE: CWE-755 - Improper Handling of Exceptional Conditions View on NVD

2025-01-20

Medium

CVE-2024-13524

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to un…

CVSS: 4.5 CWE: CWE-426 - Untrusted Search Path View on NVD

2025-01-17

High

CVE-2025-21325

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-732 - Incorrect Permission Assignment for Critical Resource View on NVD

2025-01-15

Medium

CVE-2024-54540

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

CVSS: 4.3 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

Critical

CVE-2025-0502

Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.T…

CVSS: 9.1 CWE: CWE-402 - Transmission of Private Resources into a New Sphere ('Resource Leak') View on NVD

Low

CVE-2024-5198

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a syst…

CVSS: 3.3 CWE: CWE-476 - NULL Pointer Dereference View on NVD

Medium

CVE-2025-0440

Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Me…

CVSS: 6.5 CWE: CWE-290 - Authentication Bypass by Spoofing View on NVD

2025-01-14

High

CVE-2025-23042

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL)…

CVSS: 7.5 CWE: CWE-285 - Improper Authorization View on NVD

High

CVE-2024-50338

Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The Git credential protocol is text-based over standard input/output, and consists…

CVSS: 7.4 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2025-21417

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21411

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21389

Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2025-21382

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21378

Windows CSC Service Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2025-21374

Windows CSC Service Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

High

CVE-2025-21370

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2025-21343

Windows Web Threat Defense User Service Information Disclosure Vulnerability

CVSS: 7.5 CWE: CWE-269 - Improper Privilege Management View on NVD

Medium

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

CVSS: 6.6 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2025-21340

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVSS: 5.5 CWE: CWE-284 - Improper Access Control View on NVD

High

CVE-2025-21339

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2025-21336

Windows Cryptographic Information Disclosure Vulnerability

CVSS: 5.6 CWE: CWE-203 - Observable Discrepancy View on NVD

High

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21331

Windows Installer Elevation of Privilege Vulnerability

CVSS: 7.3 CWE: CWE-59 - Improper Link Resolution Before File Access ('Link Following') View on NVD

High

CVE-2025-21330

Windows Remote Desktop Services Denial of Service Vulnerability

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability

CVSS: 6.6 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

CVSS: 6.6 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2025-21323

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21321

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21320

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21319

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21318

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21317

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21316

Windows Kernel Memory Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2025-21314

Windows SmartScreen Spoofing Vulnerability

CVSS: 6.5 CWE: CWE-451 - User Interface (UI) Misrepresentation of Critical Information View on NVD

Medium

CVE-2025-21313

Windows Security Account Manager (SAM) Denial of Service Vulnerability

CVSS: 6.5 CWE: CWE-833 - Deadlock View on NVD

Low

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability

CVSS: 2.4 CWE: CWE-908 - Use of Uninitialized Resource View on NVD

Critical

CVE-2025-21311

Windows NTLM V1 Elevation of Privilege Vulnerability

CVSS: 9.8 CWE: CWE-303 - Incorrect Implementation of Authentication Algorithm View on NVD

Medium

CVE-2025-21310

Windows Digital Media Elevation of Privilege Vulnerability

CVSS: 6.6 CWE: CWE-125 - Out-of-bounds Read View on NVD

High

CVE-2025-21309

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS: 8.1 CWE: CWE-591 - Sensitive Data Storage in Improperly Locked Memory View on NVD

Medium

CVE-2025-21308

Windows Themes Spoofing Vulnerability

CVSS: 6.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Critical

CVE-2025-21307

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVSS: 9.8 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2025-21306

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21305

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21303

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21302

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2025-21301

Windows Geolocation Service Information Disclosure Vulnerability

CVSS: 6.5 CWE: CWE-284 - Improper Access Control View on NVD

High

CVE-2025-21300

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2025-21299

Windows Kerberos Security Feature Bypass Vulnerability

CVSS: 7.1 CWE: CWE-922 - Insecure Storage of Sensitive Information View on NVD

Critical

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVSS: 9.8 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2025-21297

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS: 8.1 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2025-21292

Windows Search Service Elevation of Privilege Vulnerability

CVSS: 8.8 CWE: CWE-94 - Improper Control of Generation of Code ('Code Injection') View on NVD

High

CVE-2025-21291

Windows Direct Show Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-415 - Double Free View on NVD

Medium

CVE-2025-21288

Windows COM Server Information Disclosure Vulnerability

CVSS: 6.5 CWE: CWE-908 - Use of Uninitialized Resource View on NVD

High

CVE-2025-21287

Windows Installer Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-269 - Improper Privilege Management View on NVD

High

CVE-2025-21286

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2025-21284

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2025-21282

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

High

CVE-2025-21281

Microsoft COM for Windows Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-416 - Use After Free View on NVD

Medium

CVE-2025-21280

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2025-21278

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVSS: 6.2 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

High

CVE-2025-21276

Windows MapUrlToZone Denial of Service Vulnerability

CVSS: 7.5 CWE: CWE-191 - Integer Underflow (Wrap or Wraparound) View on NVD

High

CVE-2025-21275

Windows App Package Installer Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-285 - Improper Authorization View on NVD

Medium

CVE-2025-21274

Windows Event Tracing Denial of Service Vulnerability

CVSS: 5.5 CWE: CWE-59 - Improper Link Resolution Before File Access ('Link Following') View on NVD

High

CVE-2025-21273

Windows Telephony Service Remote Code Execution Vulnerability

CVSS: 8.8 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2025-21272

Windows COM Server Information Disclosure Vulnerability

CVSS: 6.5 CWE: CWE-908 - Use of Uninitialized Resource View on NVD

High

CVE-2025-21271

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS: 7.8 CWE: CWE-126 - Buffer Over-read View on NVD