Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Windows 10 1507 HIGH 7.8
CVE-2025-32716

Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Remote Desktop Client MEDIUM 6.5
CVE-2025-32715

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Fix: 1.2.6278 / 2.0.505.0+
Fix from $1,600 2025-06-10
Windows 10 1507 HIGH 7.8
CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 7.8
CVE-2025-32713

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 7.8
CVE-2025-32712

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows Server 2008 HIGH 8.1
CVE-2025-32710

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.8066 / 10.0.17763.7314+
Fix from $1,950 2025-06-10
Windows 11 22h2 HIGH 8.1
CVE-2025-29828

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.

Fix: 10.0.20348.3745 / 10.0.22621.5472+
Fix from $1,950 2025-06-10
Windows 10 1507 MEDIUM 5.5
CVE-2025-24069

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,600 2025-06-10
Windows 10 1507 MEDIUM 5.5
CVE-2025-24068

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,600 2025-06-10
Windows 10 1507 MEDIUM 5.5
CVE-2025-24065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,600 2025-06-10
Power Automate For Desktop CRITICAL 9.8
CVE-2025-47966

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.

No fix yet
Fix from $2,300 2025-06-05
Edge Update HIGH 8.8
CVE-2025-47181

Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges…

Fix: 1.3.195.61+
Fix from $1,950 2025-05-22
Defender For Endpoint HIGH 7.8
CVE-2025-47161

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Fix: 101.25022.0002+
Fix from $1,950 2025-05-15
Build Tools HIGH 8.0
CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing ove…

Fix: 8.0.16 / 9.0.5+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32709 KEV

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
365 Apps HIGH 7.8
CVE-2025-32704

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-05-13
365 Apps HIGH 7.8
CVE-2025-32705

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32706 KEV

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32707

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Visual Studio 2017 MEDIUM 5.5
CVE-2025-32703

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

Fix: 15.9.73 / 16.11.47+
Fix from $1,600 2025-05-13
365 Apps HIGH 7.8
CVE-2025-30393

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-05-13
Windows 10 1809 HIGH 7.8
CVE-2025-30400 KEV

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7314 / 10.0.19044.5854+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32701 KEV

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Visual Studio 2019 HIGH 7.8
CVE-2025-32702

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code …

Fix: 16.11.47 / 17.8.21+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.5
CVE-2025-30397 KEVEPSS 27%

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne…

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows Server 2012 MEDIUM 5.9
CVE-2025-30394EPSS 30%

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

Fix: 10.0.14393.8066 / 10.0.17763.7314+
Fix from $1,600 2025-05-13
Azure Ai Document Intelligence Studio CRITICAL 9.8
CVE-2025-30387

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a …

Mitigation only
Fix from $2,300 2025-05-13
Windows 10 1607 HIGH 7.8
CVE-2025-30385

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8066 / 10.0.17763.7314+
Fix from $1,950 2025-05-13
365 Apps HIGH 7.8
CVE-2025-30386

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.18827.20000+
Fix from $1,950 2025-05-13
365 Copilot HIGH 7.8
CVE-2025-30388

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13