Search
Search Results (314223 CVEs found)
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2025-55326 | 2025-10-14 | 7.5 High | ||
Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network. | ||||
CVE-2025-55333 | 2025-10-14 | 6.1 Medium | ||
Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | ||||
CVE-2025-55335 | 2025-10-14 | 7.4 High | ||
Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | ||||
CVE-2025-55338 | 2025-10-14 | 6.1 Medium | ||
Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | ||||
CVE-2025-55339 | 2025-10-14 | 7.8 High | ||
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-55677 | 2025-10-14 | 7.8 High | ||
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-55678 | 2025-10-14 | 7 High | ||
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-55683 | 2025-10-14 | 5.5 Medium | ||
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. | ||||
CVE-2025-55687 | 2025-10-14 | 7.4 High | ||
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally. | ||||
CVE-2025-55698 | 2025-10-14 | 7.7 High | ||
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network. | ||||
CVE-2025-55699 | 2025-10-14 | 5.5 Medium | ||
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. | ||||
CVE-2025-55701 | 2025-10-14 | 7.8 High | ||
Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-58717 | 2025-10-14 | 6.5 Medium | ||
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||||
CVE-2025-58730 | 2025-10-14 | 7 High | ||
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||||
CVE-2025-58732 | 2025-10-14 | 7 High | ||
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||||
CVE-2025-58738 | 2025-10-14 | 7 High | ||
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||||
CVE-2025-59186 | 2025-10-14 | 5.5 Medium | ||
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. | ||||
CVE-2025-59187 | 2025-10-14 | 7.8 High | ||
Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-59188 | 2025-10-14 | 5.5 Medium | ||
Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally. | ||||
CVE-2025-59189 | 2025-10-14 | 7.4 High | ||
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |