Vulnerability index

Browse CVEs

872 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use After FreeCWE-416 × clear
HIGH 7.0 CVE-2025-62213 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-62205 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-62199 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19426.20044+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-62203 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20068+ Fix from $1,9502025-11-11 MEDIUM 6.3 CVE-2025-60723 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny … Windows 10 1809 10.0.17763.8027 / 10.0.19044.6575+ Fix from $1,6002025-11-11 HIGH 7.0 CVE-2025-60716 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8027 / 10.0.19044.6575+ Fix from $1,9502025-11-11 HIGH 7.0 CVE-2025-60717 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8027 / 10.0.19044.6575+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-60707 Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8027 / 10.0.19044.6575+ Fix from $1,9502025-11-11 HIGH 7.0 CVE-2025-59515 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8027 / 10.0.19044.6575+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-59290 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Windows 10 21h2 10.0.19044.6332 / 10.0.19045.6332+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59282 Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to e… Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59243 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59234 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19328.20000+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59236 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20059+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59238 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59225 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20059+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59226 Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59227 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19328.20000+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59222 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59223 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20059+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59224 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20059+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59221 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-10-14 HIGH 7.4 CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Windows 11 24h2 10.0.26100.6899 / 10.0.26200.6899+ Fix from $1,9502025-10-14 HIGH 7.4 CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Windows 11 24h2 10.0.26100.6899 / 10.0.26200.6899+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59202 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8519 / 10.0.17763.7919+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59195 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta… Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59196 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to … Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-59189 Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.6899 / 10.0.26200.6899+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-58737 Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. Windows Server 2012 10.0.17763.7919 / 10.0.20348.4294+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-58738 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.21161 / 10.0.17763.7919+ Fix from $1,9502025-10-14