Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows 11 24h2
Total 830 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-29969 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-05-19 N/A 7.5 HIGH
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
CVE-2025-29970 1 Microsoft 3 Windows 11 24h2, Windows Server 2022 23h2, Windows Server 2025 2025-05-19 N/A 7.8 HIGH
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-29971 1 Microsoft 3 Windows 11 22h2, Windows 11 23h2, Windows 11 24h2 2025-05-19 N/A 7.5 HIGH
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
CVE-2025-29974 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-05-19 N/A 5.7 MEDIUM
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2025-21176 3 Apple, Linux, Microsoft 20 Macos, Linux Kernel, .net and 17 more 2025-05-06 N/A 8.8 HIGH
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21336 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-04-02 N/A 5.6 MEDIUM
Windows Cryptographic Information Disclosure Vulnerability
CVE-2024-43565 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-03-28 N/A 7.5 HIGH
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-43484 3 Apple, Linux, Microsoft 21 Macos, Linux Kernel, .net and 18 more 2025-03-28 N/A 7.5 HIGH
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-54540 2 Apple, Microsoft 3 Music, Windows 10 22h2, Windows 11 24h2 2025-03-24 N/A 4.3 MEDIUM
The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-21181 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-03-04 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21371 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-03-03 N/A 8.8 HIGH
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21212 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2025-02-28 N/A 6.5 MEDIUM
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21184 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-28 N/A 7.0 HIGH
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21254 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2025-02-28 N/A 6.5 MEDIUM
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21350 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-02-28 N/A 5.9 MEDIUM
Windows Kerberos Denial of Service Vulnerability
CVE-2025-21347 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2025-02-28 N/A 6.0 MEDIUM
Windows Deployment Services Denial of Service Vulnerability
CVE-2025-21216 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2025-02-28 N/A 6.5 MEDIUM
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21349 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2025-02-28 N/A 6.8 MEDIUM
Windows Remote Desktop Configuration Service Tampering Vulnerability
CVE-2025-21337 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-02-28 N/A 3.3 LOW
Windows NTFS Elevation of Privilege Vulnerability
CVE-2025-21376 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2025-02-26 N/A 8.1 HIGH
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability