CVE-2025-21325 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

CVE-2025-0440

Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-21370

Windows Virtualization-Based Security VBS Enclave Elevation of Privilege Vulnerability...

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-21284

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

CVE-2025-21269

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2025-21255

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-21417

CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...

CVE-2025-21343

CVE-2025-21343 corresponds to a Windows Web Threat Defense User Service Information Disclosure vulnerability. Publicly observed exposure is that the Windows Web Threat Defense User Service can disclose sensitive data. The NCSC advisory lists CVE-2025-21343 with a base score of 7.5 (HIGH) and impa...

CVE-2025-21340 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2025-21340

Technical details about CVE-2025-21340 are not provided in the supplied Connected documents. The entry concerns Windows VBS security feature bypass; no affected products/versions or patch specifics are disclosed here. Monitor for updates from Microsoft.

CVE-2025-21292 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2025-21217 Windows NTLM Spoofing Vulnerability

...

CVE-2025-21299

Technical details about CVE-2025-21299 (affected products, root cause, exploit methods, and remediation) are not provided in the given documents. Monitor for updates from Microsoft MSRC/MSKB entries for this CVE.

CVE-2025-21258 Windows Digital Media Elevation of Privilege Vulnerability

...

Windows Kerberos Security Feature Bypass Vulnerability

...

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2024-49091

Windows Domain Name Service Remote Code Execution Vulnerability...

CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...