microsoft windows 11 24h2 vulnerabilities, newest first, page 64
Filter
- 7.3CVE-2025-24994EPSS 1.2%
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24993KEVEPSS 2.2%
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- 5.5CVE-2025-24992EPSS 1.1%
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2025-24991KEVEPSS 2.0%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 6.8CVE-2025-24988EPSS 0.7%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
- 6.8CVE-2025-24987EPSS 0.7%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
- 7.8CVE-2025-24985KEVEPSS 3.9%
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
- 4.6CVE-2025-24984KEVEPSS 2.0%
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- 8.4CVE-2025-24084EPSS 0.7%
Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.
- 7.3CVE-2025-24076ExploitEPSS 3.2%
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24072EPSS 0.5%
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-24071ExploitEPSS 23%
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
- 7.8CVE-2025-24067EPSS 0.7%
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24066EPSS 0.7%
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24061EPSS 1.2%
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.
- 7.8CVE-2025-24059EPSS 0.5%
Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2025-24056EPSS 1.6%
Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
- 4.3CVE-2025-24055EPSS 0.9%
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
- 5.4CVE-2025-24054KEVExploitEPSS 62%
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 8.8CVE-2025-24051EPSS 1.5%
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-24050EPSS 0.5%
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24048EPSS 0.5%
Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24046EPSS 0.5%
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24044EPSS 0.6%
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 8.1CVE-2025-24035EPSS 1.7%
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 4.3CVE-2025-21247EPSS 3.1%
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
- 7.8CVE-2025-21180EPSS 0.9%
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-21420EPSS 3.7%
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
- 7.1CVE-2025-21419EPSS 0.7%
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
- 7.8CVE-2025-21418KEVEPSS 2.1%
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- 7.0CVE-2025-21414EPSS 0.6%
Windows Core Messaging Elevation of Privileges Vulnerability
- 8.8CVE-2025-21407EPSS 1.8%
Windows Telephony Service Remote Code Execution Vulnerability
- 8.8CVE-2025-21406EPSS 1.8%
Windows Telephony Service Remote Code Execution Vulnerability
- 7.1CVE-2025-21391KEVEPSS 2.3%
Windows Storage Elevation of Privilege Vulnerability
- 7.1CVE-2025-21379EPSS 0.9%
DHCP Client Service Remote Code Execution Vulnerability
- 6.5CVE-2025-21377EPSS 40%
NTLM Hash Disclosure Spoofing Vulnerability
- 8.1CVE-2025-21376EPSS 9.3%
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- 7.8CVE-2025-21375EPSS 0.6%
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- 7.8CVE-2025-21373EPSS 0.8%
Windows Installer Elevation of Privilege Vulnerability
- 8.8CVE-2025-21371EPSS 2.4%
Windows Telephony Service Remote Code Execution Vulnerability
- 8.8CVE-2025-21369EPSS 2.2%
Microsoft Digest Authentication Remote Code Execution Vulnerability
- 8.8CVE-2025-21368EPSS 2.2%
Microsoft Digest Authentication Remote Code Execution Vulnerability
- 7.8CVE-2025-21367EPSS 0.6%
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- 7.8CVE-2025-21359EPSS 0.6%
Windows Kernel Security Feature Bypass Vulnerability
- 7.8CVE-2025-21358EPSS 0.8%
Windows Core Messaging Elevation of Privileges Vulnerability
- 6.5CVE-2025-21352EPSS 1.0%
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- 7.5CVE-2025-21351EPSS 2.5%
Windows Active Directory Domain Services API Denial of Service Vulnerability
- 5.9CVE-2025-21350EPSS 2.1%
Windows Kerberos Denial of Service Vulnerability
- 6.8CVE-2025-21349EPSS 1.1%
Windows Remote Desktop Configuration Service Tampering Vulnerability
- 6.0CVE-2025-21347EPSS 0.7%
Windows Deployment Services Denial of Service Vulnerability