Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Windows 10 1507 HIGH 7.8
CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.8
CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 10 21h2 HIGH 7.0
CVE-2025-55689

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.6456 / 10.0.19045.6456+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-55690

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-55691

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-55693

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-55684

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 10 21h2 HIGH 7.0
CVE-2025-55685

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.6456 / 10.0.19045.6456+
Fix from $1,950 2025-10-14
Windows 10 21h2 HIGH 7.0
CVE-2025-55686

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.6456 / 10.0.19045.6456+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-55687

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unautho…

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.0
CVE-2025-55688

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows Server 2016 MEDIUM 5.5
CVE-2025-55683

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

Fix: 10.0.14393.8519 / 10.0.17763.7919+
Fix from $1,600 2025-10-14
Windows 10 1809 HIGH 7.8
CVE-2025-55681EPSS 5%

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7919 / 10.0.19044.6456+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-55678

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 10 1809 HIGH 7.0
CVE-2025-55680

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local…

Fix: 10.0.17763.7919 / 10.0.19044.6456+
Fix from $1,950 2025-10-14
Windows 11 22h2 HIGH 7.8
CVE-2025-55339

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally.

Fix: 10.0.20348.4294 / 10.0.22621.6060+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.8
CVE-2025-55677

Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
Windows 10 21h2 HIGH 7.0
CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.

Fix: 10.0.19044.6456 / 10.0.19045.6456+
Fix from $1,950 2025-10-14
Windows 11 24h2 MEDIUM 5.5
CVE-2025-55676

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locall…

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,600 2025-10-14
Windows 10 21h2 HIGH 7.0
CVE-2025-55331

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

Fix: 10.0.19044.6456 / 10.0.19045.6456+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-55335

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 11 22h2 MEDIUM 5.5
CVE-2025-55334

Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.

Fix: 10.0.22621.6060 / 10.0.22631.6060+
Fix from $1,600 2025-10-14
Windows 10 1809 MEDIUM 5.5
CVE-2025-55336

Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose inform…

Fix: 10.0.17763.7919 / 10.0.19044.6456+
Fix from $1,600 2025-10-14
Windows 10 1809 HIGH 7.5
CVE-2025-55326

Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network.

Fix: 10.0.17763.7919 / 10.0.19044.6456+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.0
CVE-2025-55328

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to eleva…

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Configuration Manager 2403 MEDIUM 6.8
CVE-2025-55320

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker…

Fix: 5.00.9128.1035 / 5.00.9132.1029+
Fix from $1,600 2025-10-14
Windows 10 1507 MEDIUM 5.5
CVE-2025-55325

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,600 2025-10-14
Asp.net Core CRITICAL 9.9
CVE-2025-55315EPSS 66%

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security f…

Fix: 2.3.6 / 8.0.21+
Fix from $2,300 2025-10-14
Exchange Server HIGH 7.8
CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

Fix: 15.02.2562.029+
Fix from $1,950 2025-10-14
Visual Studio 2017 HIGH 7.3
CVE-2025-55240

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

Fix: 15.9.77 / 16.11.52+
Fix from $1,950 2025-10-14