microsoft

15,043 tracked vulnerabilities.

CVE-2025-48802 MEDIUM
Microsoft Windows SMB - Certificate Validation Spoofing
Jul 08, 2025
CVSS 6.5
EPSS 0.01
CVE-2025-48800 MEDIUM
Windows BitLocker - Privilege Escalation
Jul 08, 2025
CVSS 6.8
EPSS 0.01
CVE-2025-48799 HIGH
Windows Update Service - Privilege Escalation
Jul 08, 2025
CVSS 7.8
EPSS 0.01
CVE-2025-48003 MEDIUM
Windows BitLocker - Privilege Escalation
Jul 08, 2025
CVSS 6.8
EPSS 0.01
CVE-2025-48002 MEDIUM
Windows 11 24H2 and Windows Server 2025 < 10.0.26100.4652 - Authenticated Information Disclosure via Integer Overflow
Jul 08, 2025
CVSS 5.7
EPSS 0.01
CVE-2025-48001 MEDIUM
Windows BitLocker Security Feature Bypass via TOCTOU Race Condition
Jul 08, 2025
CVSS 6.8
EPSS 0.00
CVE-2025-48000 HIGH
Windows 10/11, Server 2016-2022 - Use-After-Free in Connected Devices Platform Service
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47999 MEDIUM
Windows 10/11, Server 2016-2025 Hyper-V DoS via Missing Synchronization
Jul 08, 2025
CVSS 6.8
EPSS 0.00
CVE-2025-47998 HIGH
Windows Server RRAS Heap Overflow RCE (2008, 2012, 2016, 2019, 2022, 2025)
Jul 08, 2025
CVSS 8.8
EPSS 0.01
CVE-2025-47996 HIGH
Windows 10/11, Server 2008 - Privilege Escalation via MBT Transport Driver Integer Underflow
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47994 HIGH
Microsoft 365 Apps and Office - Privilege Escalation via Untrusted Data Deserialization
Jul 08, 2025
CVSS 7.8
EPSS 0.03
CVE-2025-47993 HIGH
Microsoft Windows 11 24h2 < 10.0.26100.4652 - Improper Access Control
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47991 HIGH
Windows 10/11, Server 2016-2022 - Authenticated Use-After-Free in Input Method Editor
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47988 HIGH
Azure Monitor Agent < 1.35.1 - Unauthenticated Remote Code Execution
Jul 08, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-47987 HIGH
Windows 10/11, Server 2008 - Authenticated Heap Overflow in CredSSP
Jul 08, 2025
CVSS 7.8
EPSS 0.02
CVE-2025-47986 HIGH
Windows 10/11, Server 2008 - Privilege Escalation via Universal Print Management Service UAF
Jul 08, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-47985 HIGH
Windows Event Tracing - Privilege Escalation
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47984 HIGH
Windows 10/11, Server 2008 - GDI Protection Mechanism Info Disclosure
Jul 08, 2025
CVSS 7.5
EPSS 0.14
CVE-2025-47982 HIGH
Windows Storage VSP Driver - Privilege Escalation
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47981 CRITICAL
Windows 10 1507-24H2 and Windows Server 2008-2012 - Heap-based Buffer Overflow in SPNEGO Extended Negotiation
Jul 08, 2025
CVSS 9.8
EPSS 0.22
CVE-2025-47980 MEDIUM
Windows 10/11, Server 2008 Imaging Component Unauthorized Information Disclosure
Jul 08, 2025
CVSS 6.2
EPSS 0.01
CVE-2025-47978 MEDIUM
Windows Server 2022 - Denial of Service via Out-of-bounds Read in Kerberos
Jul 08, 2025
CVSS 6.5
EPSS 0.02
CVE-2025-47976 HIGH
Windows 10 1507-22H2, Windows 11 22H2-24H2, Windows Server 2008 - Authenticated Use-After-Free in SSDP Service
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47975 HIGH
Windows 10 1507-22H2, Windows 11 22H2-24H2, Windows Server 2008 - Double Free in SSDP Service
Jul 08, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-47973 HIGH
Windows 10/11, Server 2008 - Unauthenticated Privilege Escalation via VHDX Buffer Over-read
Jul 08, 2025
CVSS 7.8
EPSS 0.00
Products
windows_server_2016 4,751 windows_server_2019 4,522 windows_server_2012 3,938 windows_server_2008 3,554 windows_10 2,974 windows_server_2022 2,901 windows_7 2,368 windows_8.1 2,216 windows_10_21h2 2,118 windows_10_22h2 2,116 windows_10_1809 2,108 windows_rt_8.1 2,020 windows_10_1607 1,800 windows_server_2022_23h2 1,676 windows_11_23h2 1,666 windows_11_22h2 1,652 internet_explorer 1,635 windows_11_24h2 1,457 windows_server_2025 1,425 windows_10_1507 1,230 Windows 11 Version 24H2 1,087 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 office 1,034 Windows Server 2022 1,014 windows_11_21h2 1,001 Windows Server 2019 1,000 Windows Server 2019 (Server Core installation) 997 Windows 10 Version 21H2 962 Windows 10 Version 22H2 959
Quick Filters
Critical CVEs With Exploits In CISA KEV