CVE-2025-27728

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2024-49076

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2024-49083

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49086

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49126

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVE-2025-21215

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-21222

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-21255

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-26678

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-27481

Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-27486

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

CVE-2025-27742

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

CVE-2024-43452

Windows Registry Elevation of Privilege Vulnerability

CVE-2025-27478

Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2025-27487

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

CVE-2025-32710

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2024-43644

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2025-21317

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-27727

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2024-49099

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2024-49104

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21285

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21372

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21200

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24045

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2025-24061

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-25008

Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-49127

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21232

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21280

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2025-29809

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

CVE-2025-21180

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

CVE-2025-21219

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-24064

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2025-32720

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

CVE-2024-43642

Windows SMB Denial of Service Vulnerability

CVE-2024-49075

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2024-49092

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-21225

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability