microsoft vulnerabilities, newest first, page 105
Filter
- 7.8CVE-2025-27730EPSS 0.6%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27729EPSS 0.8%
Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-27728EPSS 0.6%
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27727EPSS 1.0%
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2025-27492EPSS 0.4%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
- 7.1CVE-2025-27491EPSS 1.4%
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
- 7.8CVE-2025-27490EPSS 0.6%
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27489EPSS 0.6%
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.
- 8.0CVE-2025-27487EPSS 1.5%
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
- 7.5CVE-2025-27486EPSS 2.2%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27485EPSS 2.2%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27484EPSS 0.8%
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2025-27483EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
- 8.1CVE-2025-27482EPSS 1.6%
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-27481EPSS 1.3%
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2025-27480EPSS 13%
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2025-27479EPSS 2.3%
Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.
- 7.0CVE-2025-27478EPSS 0.5%
Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2025-27477EPSS 1.6%
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-27476EPSS 0.6%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2025-27475EPSS 0.4%
Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-27474EPSS 1.9%
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-27473EPSS 2.3%
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
- 5.4CVE-2025-27472EPSS 1.5%
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
- 5.9CVE-2025-27471EPSS 1.3%
Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27470EPSS 2.4%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27469EPSS 2.6%
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2025-27467EPSS 0.6%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-26688EPSS 0.6%
Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2025-26687EPSS 1.2%
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
- 7.5CVE-2025-26686EPSS 1.4%
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2025-26682EPSS 1.7%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
- 6.7CVE-2025-26681EPSS 0.6%
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2025-26680EPSS 2.0%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2025-26679EPSS 0.6%
Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.
- 8.4CVE-2025-26678EPSS 0.5%
Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.
- 6.5CVE-2025-26676EPSS 1.7%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2025-26675EPSS 0.6%
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-26674EPSS 0.6%
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
- 7.5CVE-2025-26673EPSS 2.7%
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 6.5CVE-2025-26672EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 8.1CVE-2025-26671EPSS 1.2%
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2025-26670EPSS 11%
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-26669EPSS 1.5%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-26668EPSS 1.3%
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- 6.5CVE-2025-26667EPSS 1.9%
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2025-26666EPSS 0.6%
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
- 7.0CVE-2025-26665EPSS 0.3%
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-26664EPSS 1.9%
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 8.1CVE-2025-26663EPSS 1.8%
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.