CVE-2025-25008

Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability

CVE-2022-37983

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-33164

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-35338

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

CVE-2023-35348

Active Directory Federation Service Security Feature Bypass Vulnerability

CVE-2023-36399

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-30099

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38120

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38151

Windows Kernel Information Disclosure Vulnerability

CVE-2025-21219

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-27490

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2022-38025

Windows Distributed File System (DFS) Information Disclosure Vulnerability

CVE-2023-32034

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-32045

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-32084

HTTP.sys Denial of Service Vulnerability

CVE-2023-33155

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-33169

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-35351

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVE-2023-35356

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-29999

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-38047

PowerShell Elevation of Privilege Vulnerability

CVE-2024-38065

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38071

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2024-38141

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-49127

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21180

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

CVE-2025-21225

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21406

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24060

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2025-24064

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-29831

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2022-37965

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVE-2022-37973

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2022-37994

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVE-2023-21797

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-35317

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVE-2023-35340

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2023-35360

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35361

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35364

Windows Kernel Elevation of Privilege Vulnerability