CVE-2024-30078

Windows Wi-Fi Driver Remote Code Execution Vulnerability

CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allowthat to resolve the address instead of it getting done by curl itself, themaximum length that host name can be is 255 bytes. If the host name is...

CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-38063

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2024-43572

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-21338

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability

CVE-2024-21302

Summary:As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this vulnerab...

CVE-2023-36025

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-26256

Libarchive Remote Code Execution Vulnerability

CVE-2023-36033

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36036

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-38014

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-26169

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2024-38202

SummaryMicrosoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attack...

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability

CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so thatthey can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it wouldaccept in a response, allowing a malicious server to stream an endless seriesof headers and...

CVE-2025-21391

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-21351

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-30051

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-21429

Windows USB Hub Driver Remote Code Execution Vulnerability

CVE-2024-21340

Windows Kernel Information Disclosure Vulnerability

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-20666

BitLocker Security Feature Bypass Vulnerability

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-20697

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-29988

SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2024-26161

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2024-30092

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-38112

Windows MSHTML Platform Spoofing Vulnerability

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability