CVE-2024-49124

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2025-21226

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21242

Windows Kerberos Information Disclosure Vulnerability

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVE-2023-21724

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-28241

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVE-2023-32044

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35297

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-35332

Windows Remote Desktop Protocol Security Feature Bypass

CVE-2024-30035

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30066

Winlogon Elevation of Privilege Vulnerability

CVE-2025-21191

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2025-21241

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21295

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2025-21307

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2025-27731

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2025-33059

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21756

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

CVE-2023-32041

Windows Update Orchestrator Service Information Disclosure Vulnerability

CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability

CVE-2023-36905

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-30003

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30005

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-49079

Input Method Editor (IME) Remote Code Execution Vulnerability

CVE-2025-21349

Windows Remote Desktop Configuration Service Tampering Vulnerability

CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2022-44677

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2023-32012

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2023-32056

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

CVE-2023-35362

Windows Clip Service Elevation of Privilege Vulnerability

CVE-2024-30012

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-30089

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-38066

Windows Win32k Elevation of Privilege Vulnerability

CVE-2024-43629

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2025-21270

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21368

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

CVE-2025-26645

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.