CVE-2025-21389 Windows upnphost.dll Denial of Service Vulnerability

...

CVE-2025-21382

CVE-2025-21382 affects the Microsoft Windows Graphics Component. It is a local elevation-of-privilege vulnerability in the graphics driver component, with a CVSSv3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected sources indicate that public exploits exist. Microsoft has issue...

CVE-2025-21341 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2025-21341 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21327

CVE-2025-21327 is a Windows Digital Media elevation-of-privilege vulnerability. The CVSS3.1 base vector indicates physical access required, low attack complexity and low privileges, with high impact on confidentiality, integrity, and availability (base score 6.6, medium). The connected data confi...

CVE-2025-21327 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21301 Windows Geolocation Service Information Disclosure Vulnerability

...

CVE-2025-21302 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21298 Windows OLE Remote Code Execution Vulnerability

...

CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-21291 Windows Direct Show Remote Code Execution Vulnerability

...

CVE-2025-21291

CVE-2025-21291 is a Windows Direct Show remote code execution vulnerability. Documented CVSSv3.1 shows high risk (8.8) with network exploitation requiring user interaction. Affected: Windows DirectShow components; root cause specifics not disclosed in provided materials. Microsoft has released se...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21284 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21284 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21282 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21280 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21271 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...