CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-21391

Windows Storage Elevation of Privilege Vulnerability

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-30394

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-21181

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-21230

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2024-49113

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-21293

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2024-43639

Windows KDC Proxy Remote Code Execution Vulnerability

CVE-2025-21179

DHCP Client Service Denial of Service Vulnerability

CVE-2024-49084

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-21302

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21263

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-30397

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-32709

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-24076

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

CVE-2024-43625

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

CVE-2024-49115

Windows Remote Desktop Services Remote Code Execution Vulnerability