cve.bz

microsoft windows 11 23h2 vulnerabilities, newest first, page 54

Filter
  1. 7.8CVE-2025-24066EPSS 0.7%

    Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2025-24061EPSS 1.2%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

  3. 7.8CVE-2025-24059EPSS 0.5%

    Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  4. 8.8CVE-2025-24056EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

  5. 4.3CVE-2025-24055EPSS 0.9%

    Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

  6. 5.4CVE-2025-24054KEVExploitEPSS 62%

    External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  7. 8.8CVE-2025-24051EPSS 1.5%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  8. 7.8CVE-2025-24050EPSS 0.5%

    Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2025-24044EPSS 0.6%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  10. 8.1CVE-2025-24035EPSS 1.7%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  11. 4.3CVE-2025-21247EPSS 3.1%

    Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

  12. 7.8CVE-2025-21180EPSS 0.9%

    Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

  13. 7.8CVE-2025-21420EPSS 3.7%

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

  14. 7.1CVE-2025-21419EPSS 0.7%

    Windows Setup Files Cleanup Elevation of Privilege Vulnerability

  15. 7.8CVE-2025-21418KEVEPSS 2.1%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  16. 7.0CVE-2025-21414EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  17. 8.8CVE-2025-21407EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  18. 8.8CVE-2025-21406EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  19. 7.1CVE-2025-21391KEVEPSS 2.3%

    Windows Storage Elevation of Privilege Vulnerability

  20. 6.5CVE-2025-21377EPSS 40%

    NTLM Hash Disclosure Spoofing Vulnerability

  21. 8.1CVE-2025-21376EPSS 9.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  22. 7.8CVE-2025-21375EPSS 0.6%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  23. 7.8CVE-2025-21373EPSS 0.8%

    Windows Installer Elevation of Privilege Vulnerability

  24. 8.8CVE-2025-21371EPSS 2.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  25. 8.8CVE-2025-21369EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  26. 8.8CVE-2025-21368EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  27. 7.8CVE-2025-21367EPSS 0.6%

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  28. 7.8CVE-2025-21359EPSS 0.6%

    Windows Kernel Security Feature Bypass Vulnerability

  29. 7.8CVE-2025-21358EPSS 0.8%

    Windows Core Messaging Elevation of Privileges Vulnerability

  30. 6.5CVE-2025-21352EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  31. 7.5CVE-2025-21351EPSS 2.5%

    Windows Active Directory Domain Services API Denial of Service Vulnerability

  32. 5.9CVE-2025-21350EPSS 2.1%

    Windows Kerberos Denial of Service Vulnerability

  33. 6.8CVE-2025-21349EPSS 1.1%

    Windows Remote Desktop Configuration Service Tampering Vulnerability

  34. 6.0CVE-2025-21347EPSS 0.7%

    Windows Deployment Services Denial of Service Vulnerability

  35. 3.3CVE-2025-21337EPSS 0.6%

    Windows NTFS Elevation of Privilege Vulnerability

  36. 6.5CVE-2025-21254EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  37. 6.5CVE-2025-21216EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  38. 6.5CVE-2025-21212EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  39. 8.8CVE-2025-21201EPSS 1.8%

    Windows Telephony Server Remote Code Execution Vulnerability

  40. 8.8CVE-2025-21200EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  41. 8.8CVE-2025-21190EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  42. 7.0CVE-2025-21184EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  43. 7.5CVE-2025-21181EPSS 3.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  44. 7.8CVE-2025-21325EPSS 0.4%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  45. 8.8CVE-2025-21417EPSS 1.2%

    Windows Telephony Service Remote Code Execution Vulnerability

  46. 8.8CVE-2025-21413EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  47. 8.8CVE-2025-21411EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  48. 8.8CVE-2025-21409EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  49. 7.5CVE-2025-21389EPSS 2.0%

    Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

  50. 7.8CVE-2025-21382EPSS 0.5%

    Windows Graphics Component Elevation of Privilege Vulnerability