CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2024-38063

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2024-43572

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-21302

Summary:As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this vulnerab...

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-38014

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability

CVE-2025-21391

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2024-30092

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-43584

Windows Scripting Engine Security Feature Bypass Vulnerability

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

CVE-2024-21416

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2024-38107

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

CVE-2024-37976

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2024-49113

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-21181

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-38155

Security Center Broker Information Disclosure Vulnerability

CVE-2024-20659

Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability