CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2025-27485

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

CVE-2022-21860

Windows AppContracts API Server Elevation of Privilege Vulnerability

CVE-2022-21879

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-24938

Windows CryptoAPI Denial of Service Vulnerability

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability

CVE-2024-37982

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-38185

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2024-49124

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVE-2025-21226

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21242

Windows Kerberos Information Disclosure Vulnerability

CVE-2025-27492

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

CVE-2021-43224

Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2022-23290

Windows Inking COM Elevation of Privilege Vulnerability

CVE-2022-38039

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-21691

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVE-2023-21724

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-28241

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVE-2023-32044

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35297

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-35332

Windows Remote Desktop Protocol Security Feature Bypass

CVE-2024-30035

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30066

Winlogon Elevation of Privilege Vulnerability

CVE-2024-38154

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21191

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2025-21241

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21295

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2025-21307

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2025-27731

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2025-33059

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2021-38637

Windows Storage Information Disclosure Vulnerability

CVE-2022-26797

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-35833

Windows Secure Channel Denial of Service Vulnerability

CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2023-21756

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

CVE-2023-32041

Windows Update Orchestrator Service Information Disclosure Vulnerability

CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-30003

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30005

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38031

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability