Windows 11 24h2
by Microsoft
CVEs (1,332)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21197 | 0.00 | — | 0.03 | Apr 8, 2025 | Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content. | |||
| CVE-2025-24073 | 0.00 | — | 0.01 | Apr 8, 2025 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-24074 | 0.00 | — | 0.01 | Apr 8, 2025 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-27742 | 0.00 | — | 0.01 | Apr 8, 2025 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally. | |||
| CVE-2025-27478 | 0.00 | — | 0.00 | Apr 8, 2025 | Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-27477 | 0.00 | — | 0.01 | Apr 8, 2025 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-27475 | 0.00 | — | 0.00 | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-27476 | 0.00 | — | 0.01 | Apr 8, 2025 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-27471 | 0.00 | — | 0.01 | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network. | |||
| CVE-2025-26688 | 0.00 | — | 0.01 | Apr 8, 2025 | Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-26686 | 0.00 | — | 0.01 | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-26681 | 0.00 | — | 0.01 | Apr 8, 2025 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-26668 | 0.00 | — | 0.01 | Apr 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-26669 | 0.00 | — | 0.01 | Apr 8, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2025-26666 | 0.00 | — | 0.01 | Apr 8, 2025 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. | |||
| CVE-2025-26665 | 0.00 | — | 0.00 | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-26663 | 0.00 | — | 0.02 | Apr 8, 2025 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-26645 | 0.00 | — | 0.03 | Mar 11, 2025 | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-24994 | 0.00 | — | 0.01 | Mar 11, 2025 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-24992 | 0.00 | — | 0.01 | Mar 11, 2025 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. |
- CVE-2025-21197Apr 8, 2025risk 0.00cvss —epss 0.03
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
- CVE-2025-24073Apr 8, 2025risk 0.00cvss —epss 0.01
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2025-24074Apr 8, 2025risk 0.00cvss —epss 0.01
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2025-27742Apr 8, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- CVE-2025-27478Apr 8, 2025risk 0.00cvss —epss 0.00
Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- CVE-2025-27477Apr 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- CVE-2025-27475Apr 8, 2025risk 0.00cvss —epss 0.00
Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.
- CVE-2025-27476Apr 8, 2025risk 0.00cvss —epss 0.01
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- CVE-2025-27471Apr 8, 2025risk 0.00cvss —epss 0.01
Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.
- CVE-2025-26688Apr 8, 2025risk 0.00cvss —epss 0.01
Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
- CVE-2025-26686Apr 8, 2025risk 0.00cvss —epss 0.01
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- CVE-2025-26681Apr 8, 2025risk 0.00cvss —epss 0.01
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2025-26668Apr 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-26669Apr 8, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-26666Apr 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
- CVE-2025-26665Apr 8, 2025risk 0.00cvss —epss 0.00
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
- CVE-2025-26663Apr 8, 2025risk 0.00cvss —epss 0.02
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2025-26645Mar 11, 2025risk 0.00cvss —epss 0.03
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2025-24994Mar 11, 2025risk 0.00cvss —epss 0.01
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-24992Mar 11, 2025risk 0.00cvss —epss 0.01
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
Page 50 of 67