cve.bz

Microsoft Patch Tuesday, May 2025: the CVEs

Filter

Microsoft Patch Tuesday May 2025: the CVEs Microsoft published on 13 May 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.0CVE-2025-26646EPSS 1.3%

    External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

  2. 7.8CVE-2025-32709KEVEPSS 1.8%

    Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2025-32707EPSS 0.6%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

  4. 7.8CVE-2025-32706KEVEPSS 2.3%

    Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2025-32705EPSS 0.5%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  6. 7.8CVE-2025-32704EPSS 0.4%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  7. 5.5CVE-2025-32703EPSS 0.5%

    Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

  8. 7.8CVE-2025-32702EPSS 0.6%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.

  9. 7.8CVE-2025-32701KEVEPSS 1.4%

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2025-30400KEVEPSS 1.9%

    Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

  11. 7.5CVE-2025-30397KEVExploitEPSS 27%

    Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

  12. 5.9CVE-2025-30394EPSS 34%

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

  13. 7.8CVE-2025-30393EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2025-30388EPSS 4.4%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

  15. 9.8CVE-2025-30387EPSS 1.3%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.

  16. 7.8CVE-2025-30386EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  17. 7.8CVE-2025-30385EPSS 0.5%

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2025-30384EPSS 1.4%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

  19. 7.8CVE-2025-30383EPSS 0.6%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 7.8CVE-2025-30382EPSS 2.6%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

  21. 7.8CVE-2025-30381EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2025-30379EPSS 0.6%

    Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.0CVE-2025-30378EPSS 1.4%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2025-30377EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2025-30376EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2025-30375EPSS 0.6%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2025-29979EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2025-29978EPSS 0.6%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2025-29977EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2025-29976EPSS 0.6%

    Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2025-29975EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

  32. 5.7CVE-2025-29974EPSS 0.7%

    Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

  33. 7.0CVE-2025-29973EPSS 0.3%

    Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

  34. 7.5CVE-2025-29971EPSS 68%

    Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.

  35. 7.8CVE-2025-29970EPSS 0.5%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  36. 7.5CVE-2025-29969EPSS 1.2%

    Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.

  37. 6.5CVE-2025-29968EPSS 2.1%

    Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

  38. 8.8CVE-2025-29967EPSS 1.2%

    Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  39. 8.8CVE-2025-29966EPSS 1.3%

    Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

  40. 8.8CVE-2025-29964EPSS 1.1%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  41. 8.8CVE-2025-29963EPSS 1.1%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  42. 8.8CVE-2025-29962EPSS 16%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  43. 6.5CVE-2025-29961EPSS 1.5%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  44. 6.5CVE-2025-29960EPSS 1.6%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  45. 6.5CVE-2025-29959EPSS 1.6%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  46. 6.5CVE-2025-29958EPSS 1.5%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  47. 6.2CVE-2025-29957EPSS 0.6%

    Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.

  48. 5.4CVE-2025-29956EPSS 1.1%

    Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

  49. 5.5CVE-2025-29955EPSS 0.6%

    Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.

  50. 5.9CVE-2025-29954EPSS 1.5%

    Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

  51. 7.5CVE-2025-29842EPSS 0.4%

    Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.

  52. 7.0CVE-2025-29841EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

  53. 8.8CVE-2025-29840EPSS 1.1%

    Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  54. 4.0CVE-2025-29839EPSS 0.5%

    Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.

  55. 7.0CVE-2025-29838EPSS 0.4%

    Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.

  56. 5.5CVE-2025-29837EPSS 0.7%

    Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.

  57. 6.5CVE-2025-29836EPSS 1.4%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  58. 6.5CVE-2025-29835EPSS 1.4%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  59. 7.7CVE-2025-29833EPSS 0.5%

    Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.

  60. 6.5CVE-2025-29832EPSS 1.4%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  61. 7.5CVE-2025-29831EPSS 1.0%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  62. 6.5CVE-2025-29830EPSS 1.4%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  63. 5.5CVE-2025-29829EPSS 0.6%

    Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.

  64. 8.8CVE-2025-29826EPSS 0.9%

    Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

  65. 6.7CVE-2025-27488EPSS 0.4%

    Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

  66. 7.0CVE-2025-27468EPSS 0.3%

    Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  67. 6.5CVE-2025-26685EPSS 0.7%

    Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.

  68. 6.7CVE-2025-26684EPSS 0.4%

    External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

  69. 7.5CVE-2025-26677EPSS 1.8%

    Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

  70. 7.8CVE-2025-24063EPSS 0.7%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  71. 7.1CVE-2025-21264EPSS 0.8%

    Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.