CVE-2025-21297

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-26647

Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-26651

Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

CVE-2024-30001

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30004

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38104

Windows Fax Service Remote Code Execution Vulnerability

CVE-2024-38215

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-43630

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-49085

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21307

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2024-30000

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30095

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-37982

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-43599

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-49089

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49106

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-21226

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2024-30091

Win32k Elevation of Privilege Vulnerability

CVE-2024-43582

Remote Desktop Protocol Server Remote Code Execution Vulnerability

CVE-2024-49096

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21191

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2025-21242

Windows Kerberos Information Disclosure Vulnerability

CVE-2025-27492

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

CVE-2025-33059

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2024-29998

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30008

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2024-30021

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38128

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-49079

Input Method Editor (IME) Remote Code Execution Vulnerability

CVE-2024-49118

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2025-21241

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21295

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2025-21349

Windows Remote Desktop Configuration Service Tampering Vulnerability

CVE-2025-26645

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2025-27731

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2024-38185

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-49124

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2024-30035

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30066

Winlogon Elevation of Privilege Vulnerability

CVE-2024-38054

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38154

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21270

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21368

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2025-24058

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.