microsoft

15,023 tracked vulnerabilities.

CVE-2025-54895 HIGH
Windows 10 1507-24H2 & Server 2008-2012 Privilege Escalation via SPNEGO Integer Overflow
Sep 09, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-54894 HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Local Privilege Escalation via LSASS Heap Overflow
Sep 09, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-54116 HIGH
Windows MultiPoint Services - Improper Access Control
Sep 09, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-54115 HIGH
Windows Hyper-V - Privilege Escalation via Race Condition
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54114 HIGH
Windows - Privilege Escalation via Race Condition in Connected Devices Platform Service
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54113 HIGH
Windows Server 2008/2012/2016/2019/2022/2025 <10.0.26100.6508 - RCE via RRAS Heap Overflow
Sep 09, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-54112 HIGH
Windows 10/11, Server 2016-2019 Use-After-Free in Virtual Hard Drive
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54111 HIGH
Windows 10 1507-22H2, Windows 11 22H2-24H2, Windows Server 2016-2019 - Use-After-Free in XAML Phone DatePickerFlyout
Sep 09, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-54110 HIGH
Windows Kernel - Integer Overflow or Wraparound
Sep 09, 2025
CVSS 8.8
EPSS 0.04
CVE-2025-54109 MEDIUM
Windows Defender Firewall Service - Authenticated Privilege Escalation via Type Confusion
Sep 09, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-54108 HIGH
Windows 11 24H2 / Server 2025 < 10.0.26100.6508 Privilege Escalation via Race Condition
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54107 MEDIUM
Windows 10/11, Server 2008 Security Feature Bypass via MapUrlToZone
Sep 09, 2025
CVSS 4.3
EPSS 0.01
CVE-2025-54106 HIGH
Windows Server RRAS Integer Overflow Remote Code Execution
Sep 09, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-54105 HIGH
Windows 11 24H2/Server 2022 23H2/2025 Privilege Escalation via Brokering File System Race Condition
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54104 MEDIUM
Windows Defender Firewall Service - Authenticated Privilege Escalation via Type Confusion
Sep 09, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-54103 HIGH
Windows 10/11, Server 2022/2025 Use-After-Free in Windows Management Services
Sep 09, 2025
CVSS 7.4
EPSS 0.00
CVE-2025-54102 HIGH
Windows 10/11, Server 2016-2022 Privilege Escalation via Connected Devices Platform UAF
Sep 09, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-54101 MEDIUM
Windows SMBv3 Client - Use-After-Free Remote Code Execution
Sep 09, 2025
CVSS 4.8
EPSS 0.02
CVE-2025-54099 HIGH
Windows 10/11, Server 2008 - Privilege Escalation via Stack Overflow in AFD
Sep 09, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-54098 HIGH
Windows Hyper-V - Authenticated Privilege Escalation via Improper Access Control
Sep 09, 2025
CVSS 7.8
EPSS 0.03
CVE-2025-54097 MEDIUM
Windows Server RRAS Unauthenticated Out-of-bounds Read
Sep 09, 2025
CVSS 6.5
EPSS 0.01
CVE-2025-54096 MEDIUM
Windows Server RRAS Unauthenticated Out-of-bounds Read
Sep 09, 2025
CVSS 6.5
EPSS 0.01
CVE-2025-54095 MEDIUM
Windows Server 2008-2025 Unauthenticated Information Disclosure via Out-of-bounds Read in RRAS
Sep 09, 2025
CVSS 6.5
EPSS 0.01
CVE-2025-54094 MEDIUM
Windows Defender Firewall Service - Authenticated Privilege Escalation via Type Confusion
Sep 09, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-54093 HIGH
Windows 10/11, Server 2008 - Privilege Escalation via TCP/IP TOCTOU Race Condition
Sep 09, 2025
CVSS 7.0
EPSS 0.00
Products
windows_server_2016 4,690 windows_server_2019 4,443 windows_server_2012 3,894 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,818 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,035 windows_10_22h2 2,033 windows_10_1809 2,029 windows_rt_8.1 2,020 windows_10_1607 1,739 windows_server_2022_23h2 1,676 windows_11_23h2 1,657 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,354 windows_server_2025 1,320 windows_10_1507 1,230 Windows 11 Version 24H2 1,086 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 961 Windows 10 Version 22H2 958
Quick Filters
Critical CVEs With Exploits In CISA KEV