CVE-2013-3900

Why is Microsoft republishing a CVE from 2013?We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format i...

CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-21391

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-30394

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2024-49113

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2025-21181

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21230

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21293

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2024-43639

Windows KDC Proxy Remote Code Execution Vulnerability

CVE-2025-30397

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2025-21179

DHCP Client Service Denial of Service Vulnerability

CVE-2024-49084

Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-32709

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-21302

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21263

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability