Browse CVEs

HIGH 7.8 CVE-2025-62458 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8688 / 10.0.17763.8146+ Fix from $1,9502025-12-09 HIGH 7.8 CVE-2025-62454 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8146 / 10.0.19044.6691+ Fix from $1,9502025-12-09 HIGH 8.0 CVE-2025-62452 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 8.8 CVE-2025-62220 Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. Windows Subsystem For Linux 2.6.2+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-62201 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20068+ Fix from $1,9502025-11-11 CRITICAL 9.8 CVE-2025-60724EPSS 6% Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. 365 Copilot 10.0.14393.8594 / 10.0.17763.8027+ Fix from $2,3002025-11-11 HIGH 8.0 CVE-2025-60715 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-60714 Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 7.3 CVE-2025-59504 Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally. Azure Monitor Agent 1.37.1+ Fix from $1,9502025-11-11 HIGH 8.8 CVE-2025-59295 Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59275 Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59254 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59255 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59242 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59191 Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-58722 Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8519 / 10.0.17763.7919+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-58725 Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-55697 Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. Windows Server 2022 23h2 10.0.25398.1913 / 10.0.26100.6899+ Fix from $1,9502025-10-14 HIGH 8.4 CVE-2025-54910 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54907 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54900 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20047+ Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.21128 / 10.0.14393.8422+ Fix from $1,9502025-09-09 HIGH 8.8 CVE-2025-54113 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Windows Server 2008 10.0.14393.8422 / 10.0.17763.7792+ Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54091 Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21128 / 10.0.14393.8422+ Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-53783 Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. Dynamics 365 Guides 1.0.0.2025102802 / 1.0.94.2025168802+ Fix from $1,9502025-08-12 CRITICAL 9.8 CVE-2025-53766EPSS 7% Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. 365 Copilot 10.0.10240.21100 / 10.0.14393.8330+ Fix from $2,3002025-08-12 HIGH 7.8 CVE-2025-53741 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53732 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Copilot 16.0.14326.22618 / 16.0.19127.20000+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53737 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 8.0 CVE-2025-53720 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows Server 2008 10.0.14393.8330 / 10.0.17763.7678+ Fix from $1,9502025-08-12