CVE-2022-26821

Windows DNS Server Remote Code Execution Vulnerability

CVE-2023-35305

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35306

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-35308

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2023-35642

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2024-30069

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-37989

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38025

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2024-38034

Windows Filtering Platform Elevation of Privilege Vulnerability

CVE-2024-43467

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-43567

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

CVE-2024-43642

Windows SMB Denial of Service Vulnerability

CVE-2024-49075

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-21221

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-21225

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21407

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24055

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-27470

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

CVE-2025-27473

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

CVE-2021-43228

SymCrypt Denial of Service Vulnerability

CVE-2021-43229

Windows NTFS Elevation of Privilege Vulnerability

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability

CVE-2021-43247

Windows TCP/IP Driver Elevation of Privilege Vulnerability

CVE-2022-34728

Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-38003

Windows Resilient File System Elevation of Privilege

CVE-2023-35304

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35316

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVE-2024-37986

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38010

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38045

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-49088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-49095

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVE-2025-21216

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21338

GDI+ Remote Code Execution Vulnerability

CVE-2025-24066

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-26672

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2025-27471

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

CVE-2025-27732

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2025-27739

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2025-29808

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

CVE-2025-29812

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

CVE-2025-29831

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.