CVE-2024-49076

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2024-49083

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2024-49126

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVE-2025-21317

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-27727

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2024-38116

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-43452

Windows Registry Elevation of Privilege Vulnerability

CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21285

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21372

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2025-32720

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2024-43644

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-29809

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

CVE-2024-43500

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVE-2024-43513

BitLocker Security Feature Bypass Vulnerability

CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2024-49099

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2024-49104

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21200

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21232

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21280

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2025-24061

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2024-38151

Windows Kernel Information Disclosure Vulnerability

CVE-2025-21219

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2024-38141

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVE-2024-49127

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21180

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21406

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-24060

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-27490

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2025-27730

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVE-2024-38114

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVE-2024-38248

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-38254

Windows Authentication Information Disclosure Vulnerability

CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-21221

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-21338

GDI+ Remote Code Execution Vulnerability

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability