Vulnerability index

Browse CVEs

872 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use After FreeCWE-416 × clear
Windows 10 1607 HIGH 7.0
CVE-2025-62213

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8594 / 10.0.17763.8027+
Fix from $1,950 2025-11-11
365 Apps HIGH 7.8
CVE-2025-62205

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-11-11
365 Apps HIGH 7.8
CVE-2025-62199

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.19426.20044+
Fix from $1,950 2025-11-11
365 Apps HIGH 7.8
CVE-2025-62203

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20068+
Fix from $1,950 2025-11-11
Windows 10 1809 MEDIUM 6.3
CVE-2025-60723

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny …

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,600 2025-11-11
Windows 10 1809 HIGH 7.0
CVE-2025-60716

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,950 2025-11-11
Windows 10 1809 HIGH 7.0
CVE-2025-60717

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,950 2025-11-11
Windows 10 1809 HIGH 7.8
CVE-2025-60707

Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,950 2025-11-11
Windows 10 1809 HIGH 7.0
CVE-2025-59515

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,950 2025-11-11
Windows 10 21h2 HIGH 7.8
CVE-2025-59290

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.6332 / 10.0.19045.6332+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-59282

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to e…

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59243

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59234

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.19328.20000+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59236

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20059+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59238

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59225

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20059+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59226

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59227

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.19328.20000+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59222

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59223

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20059+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.8
CVE-2025-59224

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20059+
Fix from $1,950 2025-10-14
365 Apps HIGH 7.0
CVE-2025-59221

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.4
CVE-2025-59210

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.4
CVE-2025-59206

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 10 1607 HIGH 7.0
CVE-2025-59202

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8519 / 10.0.17763.7919+
Fix from $1,950 2025-10-14
Windows 10 1809 HIGH 7.0
CVE-2025-59195

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta…

Fix: 10.0.17763.7919 / 10.0.19044.6456+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-59196

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to …

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-59189

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows Server 2012 HIGH 7.0
CVE-2025-58737

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

Fix: 10.0.17763.7919 / 10.0.20348.4294+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-58738

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

Fix: 10.0.10240.21161 / 10.0.17763.7919+
Fix from $1,950 2025-10-14