CVE-2025-21291 Windows Direct Show Remote Code Execution Vulnerability

...

CVE-2025-21291

CVE-2025-21291 is a Windows Direct Show remote code execution vulnerability. Documented CVSSv3.1 shows high risk (8.8) with network exploitation requiring user interaction. Affected: Windows DirectShow components; root cause specifics not disclosed in provided materials. Microsoft has released se...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21284 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21284 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21282 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21280 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21271 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-21266 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21263 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21263 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21260 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21260

Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21258 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21255 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-21249 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21248

CVE-2025-21248 is a Windows Telephony Service Remote Code Execution vulnerability. The initial and connected documents confirm affected software: Windows Telephony Service component, with exploitable path over the network and required user interaction. CVSS v3.1 base score 8.8 (HIGH), with full i...