CVE-2013-3900

Why is Microsoft republishing a CVE from 2013?We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format i...

CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-38063

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2024-43572

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-21302

Summary:As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this vulnerab...

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-38014

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability

CVE-2025-21391

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2024-30092

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-43584

Windows Scripting Engine Security Feature Bypass Vulnerability

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

CVE-2024-21416

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2024-38107

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVE-2024-37976

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2024-49113

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-21181

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-38155

Security Center Broker Information Disclosure Vulnerability

CVE-2024-20659

Windows Hyper-V Security Feature Bypass Vulnerability