Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sharepoint Enterprise Server HIGH 7.2
CVE-2025-29793EPSS 22%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.18526.20172+
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27747

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27748

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27749

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27750

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27751

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27752

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
System Center Data Protection Manager HIGH 7.8
CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2025-04-08
Office HIGH 7.8
CVE-2025-27744

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27745

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2025-04-08
365 Apps HIGH 7.8
CVE-2025-27746

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20003+
Fix from $1,950 2025-04-08
Windows 10 1507 MEDIUM 5.5
CVE-2025-27742

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

Fix: 10.0.14393.7969 / 10.0.17763.7136+
Fix from $1,600 2025-04-08
Windows Server 2008 HIGH 8.8
CVE-2025-27740

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

Fix: 10.0.14393.7969 / 10.0.17763.7136+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 8.6
CVE-2025-27737

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1809 HIGH 7.8
CVE-2025-27739

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7136 / 10.0.19044.5737+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.8
CVE-2025-27741

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1507 MEDIUM 6.5
CVE-2025-27738

Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,600 2025-04-08
Windows 10 1809 HIGH 7.8
CVE-2025-27731

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7136 / 10.0.19044.5737+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.8
CVE-2025-27733

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.0
CVE-2025-27732

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1507 MEDIUM 6.0
CVE-2025-27735

Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a secur…

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,600 2025-04-08
Windows 10 1607 MEDIUM 5.5
CVE-2025-27736

Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose informat…

Fix: 10.0.14393.7969 / 10.0.17763.7136+
Fix from $1,600 2025-04-08
Windows 10 1507 HIGH 7.8
CVE-2025-27727

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 11 24h2 HIGH 7.8
CVE-2025-27728

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.3775+
Fix from $1,950 2025-04-08
Windows 10 21h2 HIGH 7.8
CVE-2025-27729

Use after free in Windows Shell allows an unauthorized attacker to execute code locally.

Fix: 10.0.19044.5737 / 10.0.19045.5737+
Fix from $1,950 2025-04-08
Windows 10 1809 HIGH 7.8
CVE-2025-27730

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.7136 / 10.0.19044.5737+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.1
CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 11 22h2 HIGH 7.0
CVE-2025-27492

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker t…

Fix: 10.0.20348.3453 / 10.0.22621.5189+
Fix from $1,950 2025-04-08
Remote Desktop Client HIGH 8.0
CVE-2025-27487

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

Fix: 1.2.6081 / 2.0.379.0+
Fix from $1,950 2025-04-08
Azure Stack Hci 22h2 HIGH 7.8
CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.

Fix: 10.0.20348.3328 / 10.0.25398.1486+
Fix from $1,950 2025-04-08