Vulnerability index

Browse CVEs

377 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Sharepoint Server HIGH 8.8
CVE-2025-49704 KEVEPSS 100%

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Mitigation only
Fix from $1,950 2025-07-08
Windows 10 1507 HIGH 8.8
CVE-2025-33073 KEVEPSS 80%

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 8.8
CVE-2025-33053 KEVEPSS 85%

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 7.8
CVE-2025-32709 KEV

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32706 KEV

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows 10 1809 HIGH 7.8
CVE-2025-30400 KEV

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7314 / 10.0.19044.5854+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32701 KEV

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.5
CVE-2025-30397 KEVEPSS 27%

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne…

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-29824 KEVEPSS 14%

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.0
CVE-2025-26633 KEVEPSS 30%

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,950 2025-03-11
Windows 10 1507 HIGH 7.8
CVE-2025-24993 KEV

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,950 2025-03-11
Windows 10 1507 MEDIUM 5.5
CVE-2025-24991 KEV

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,600 2025-03-11
Windows 10 1507 HIGH 7.8
CVE-2025-24985 KEV

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,950 2025-03-11
Windows 10 1507 HIGH 7.0
CVE-2025-24983 KEV

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,950 2025-03-11
Windows 10 1507 MEDIUM 5.4
CVE-2025-24054 KEVEPSS 59%

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,600 2025-03-11
Power Pages CRITICAL 9.8
CVE-2025-24989 KEV

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing th…

Patch available
Fix from $2,300 2025-02-19
Windows 10 1607 HIGH 7.8
CVE-2025-21418 KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.17763.6893+
Fix from $1,950 2025-02-11
Windows 10 1507 HIGH 7.1
CVE-2025-21391 KEV

Windows Storage Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Windows 10 21h2 HIGH 7.8
CVE-2025-21333 KEVEPSS 10%

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+
Fix from $1,950 2025-01-14
Windows 10 21h2 HIGH 7.8
CVE-2025-21334 KEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+
Fix from $1,950 2025-01-14
Windows 10 21h2 HIGH 7.8
CVE-2025-21335 KEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+
Fix from $1,950 2025-01-14
Windows 10 1507 HIGH 7.8
CVE-2024-49138 KEVEPSS 25%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Fix: 10.0.10240.20857 / 10.0.14393.7606+
Fix from $1,950 2024-12-12
Partner Center CRITICAL 9.8
CVE-2024-49035 KEV

An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2024-11-26
Windows 10 1507 HIGH 8.8
CVE-2024-49039 KEVEPSS 14%

Windows Task Scheduler Elevation of Privilege Vulnerability

Fix: 10.0.10240.20826 / 10.0.14393.7515+
Fix from $1,950 2024-11-12
Windows 10 1507 MEDIUM 6.5
CVE-2024-43451 KEVEPSS 82%

NTLM Hash Disclosure Spoofing Vulnerability

Fix: 10.0.10240.20826 / 10.0.14393.7515+
Fix from $1,600 2024-11-12
Windows 10 1507 HIGH 8.1
CVE-2024-43573 KEVEPSS 44%

Windows MSHTML Platform Spoofing Vulnerability

Fix: 10.0.10240.20796 / 10.0.14393.7428+
Fix from $1,950 2024-10-08
Windows 10 1507 HIGH 7.8
CVE-2024-43572 KEVEPSS 67%

Microsoft Management Console Remote Code Execution Vulnerability

Fix: 10.0.10240.20796 / 10.0.14393.7428+
Fix from $1,950 2024-10-08
Configuration Manager 2403 CRITICAL 9.8
CVE-2024-43468 KEVEPSS 61%

Microsoft Configuration Manager Remote Code Execution Vulnerability

No fix yet
Fix from $2,300 2024-10-08
Windows 10 1507 HIGH 8.8
CVE-2024-43461 KEVEPSS 52%

Windows MSHTML Platform Spoofing Vulnerability

Fix: 10.0.10240.20766 / 10.0.14393.7336+
Fix from $1,950 2024-09-10
Office 2019 HIGH 7.3
CVE-2024-38226 KEV

Microsoft Publisher Security Feature Bypass Vulnerability

Patch available
Fix from $1,950 2024-09-10