Browse CVEs

HIGH 8.8 CVE-2025-49704 KEVEPSS 100% Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server Mitigation only Fix from $1,9502025-07-08 HIGH 8.8 CVE-2025-33073 KEVEPSS 80% Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. Windows 10 1507 10.0.10240.21034 / 10.0.14393.8148+ Fix from $1,9502025-06-10 HIGH 8.8 CVE-2025-33053 KEVEPSS 85% External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. Windows 10 1507 10.0.10240.21034 / 10.0.14393.8148+ Fix from $1,9502025-06-10 HIGH 7.8 CVE-2025-32709 KEV Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-32706 KEV Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-30400 KEV Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7314 / 10.0.19044.5854+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-32701 KEV Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,9502025-05-13 HIGH 7.5 CVE-2025-30397 KEVEPSS 27% Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne… Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-29824 KEVEPSS 14% Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.20978 / 10.0.14393.7969+ Fix from $1,9502025-04-08 HIGH 7.0 CVE-2025-26633 KEVEPSS 30% Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24993 KEV Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 MEDIUM 5.5 CVE-2025-24991 KEV Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,6002025-03-11 HIGH 7.8 CVE-2025-24985 KEV Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.0 CVE-2025-24983 KEV Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 MEDIUM 5.4 CVE-2025-24054 KEVEPSS 59% External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,6002025-03-11 CRITICAL 9.8 CVE-2025-24989 KEV An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing th… Power Pages Patch available Fix from $2,3002025-02-19 HIGH 7.8 CVE-2025-21418 KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows 10 1607 10.0.10240.20915 / 10.0.17763.6893+ Fix from $1,9502025-02-11 HIGH 7.1 CVE-2025-21391 KEV Windows Storage Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20915 / 10.0.14393.7785+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21333 KEVEPSS 10% Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21334 KEV Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21335 KEV Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-49138 KEVEPSS 25% Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 CRITICAL 9.8 CVE-2024-49035 KEV An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. Partner Center Mitigation only Fix from $2,3002024-11-26 HIGH 8.8 CVE-2024-49039 KEVEPSS 14% Windows Task Scheduler Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20826 / 10.0.14393.7515+ Fix from $1,9502024-11-12 MEDIUM 6.5 CVE-2024-43451 KEVEPSS 82% NTLM Hash Disclosure Spoofing Vulnerability Windows 10 1507 10.0.10240.20826 / 10.0.14393.7515+ Fix from $1,6002024-11-12 HIGH 8.1 CVE-2024-43573 KEVEPSS 44% Windows MSHTML Platform Spoofing Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,9502024-10-08 HIGH 7.8 CVE-2024-43572 KEVEPSS 67% Microsoft Management Console Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20796 / 10.0.14393.7428+ Fix from $1,9502024-10-08 CRITICAL 9.8 CVE-2024-43468 KEVEPSS 61% Microsoft Configuration Manager Remote Code Execution Vulnerability Configuration Manager 2403 No fix yet Fix from $2,3002024-10-08 HIGH 8.8 CVE-2024-43461 KEVEPSS 52% Windows MSHTML Platform Spoofing Vulnerability Windows 10 1507 10.0.10240.20766 / 10.0.14393.7336+ Fix from $1,9502024-09-10 HIGH 7.3 CVE-2024-38226 KEV Microsoft Publisher Security Feature Bypass Vulnerability Office 2019 Patch available Fix from $1,9502024-09-10