Browse high-severity CVEs

Windows 10 21h2 HIGH 7.8

CVE-2025-24062

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.5737 / 10.0.19045.5737+

Fix from $1,950 2025-04-08

Windows 10 1507 HIGH 7.8

CVE-2025-24073

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+

Fix from $1,950 2025-04-08

Windows 10 1809 HIGH 7.8

CVE-2025-24074

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7136 / 10.0.19044.5737+

Fix from $1,950 2025-04-08

Partner Center HIGH 8.8

CVE-2025-29814

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

Mitigation only

Fix from $1,950 2025-03-21

Windows 10 1507 HIGH 7.8

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+

Fix from $1,950 2025-02-11

Windows 10 1507 MEDIUM 5.9

CVE-2025-21350

Windows Kerberos Denial of Service Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+

Fix from $1,600 2025-02-11

Surface Hub 2s Firmware HIGH 7.1

CVE-2025-21194

Microsoft Surface Security Feature Bypass Vulnerability

No fix yet

Fix from $1,950 2025-02-11

Windows 11 22h2 HIGH 8.8

CVE-2025-21370

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Fix: 10.0.22621.4751 / 10.0.22631.4751+

Fix from $1,950 2025-01-14

Sharepoint Server HIGH 7.8

CVE-2025-21344

Microsoft SharePoint Server Remote Code Execution Vulnerability

Fix: 16.0.17928.20356+

Fix from $1,950 2025-01-14

Windows 10 1507 MEDIUM 5.5

CVE-2025-21284

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+

Fix from $1,600 2025-01-14

Windows 10 1507 MEDIUM 5.5

CVE-2025-21280

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+

Fix from $1,600 2025-01-14

Windows 10 21h2 HIGH 7.8

CVE-2025-21234

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+

Fix from $1,950 2025-01-14

Windows 10 21h2 HIGH 7.8

CVE-2025-21235

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+

Fix from $1,950 2025-01-14

Windows 10 1507 HIGH 7.5

CVE-2025-21230

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+

Fix from $1,950 2025-01-14

Windows 10 1809 MEDIUM 6.8

CVE-2024-49073

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

Fix: 10.0.17763.6659 / 10.0.19044.5247+

Fix from $1,600 2024-12-12

Defender For Endpoint HIGH 8.1

CVE-2024-49057

Microsoft Defender for Endpoint on Android Spoofing Vulnerability

Fix: 1.0.7128.0101+

Fix from $1,950 2024-12-12

365 Apps HIGH 7.5

CVE-2024-49033

Microsoft Word Security Feature Bypass Vulnerability

Patch available

Fix from $1,950 2024-11-12

Windows Server 2008 HIGH 8.8

CVE-2024-43611

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Fix: 10.0.14393.7428 / 10.0.17763.6414+

Fix from $1,950 2024-10-08

Windows Server 2008 HIGH 8.8

CVE-2024-43592

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Fix: 10.0.14393.7428 / 10.0.17763.6414+

Fix from $1,950 2024-10-08

Windows Server 2008 HIGH 8.8

CVE-2024-43593

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Fix: 10.0.14393.7428 / 10.0.17763.6414+

Fix from $1,950 2024-10-08

Windows 10 1809 MEDIUM 6.5

CVE-2024-43557

Windows Mobile Broadband Driver Denial of Service Vulnerability