CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2023-29325

Windows OLE Remote Code Execution Vulnerability

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-30040

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-21408

Windows Hyper-V Denial of Service Vulnerability

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability

CVE-2024-38163

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2024-20674

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

CVE-2024-21438

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2024-21416

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26207

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2023-36405

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2023-28250

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2024-20652

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2024-21437

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2023-21729

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVE-2024-38107

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVE-2024-21433

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2024-26162

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26166

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-21358

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21372

Windows OLE Remote Code Execution Vulnerability