Vendor CVEs
Microsoft
All CVEs
15,666 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-24992 | Med | 0.36 | 5.5 | 0.01 | Mar 11, 2025 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. | ||
| CVE-2025-21374 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows CSC Service Information Disclosure Vulnerability | ||
| CVE-2025-21340 | Med | 0.36 | 5.5 | 0.00 | Jan 14, 2025 | Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability | ||
| CVE-2025-21336 | Med | 0.36 | 5.6 | 0.01 | Jan 14, 2025 | Windows Cryptographic Information Disclosure Vulnerability | ||
| CVE-2025-21323 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21321 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21320 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21319 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21318 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21317 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21316 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21284 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability | ||
| CVE-2025-21280 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability | ||
| CVE-2025-21274 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Event Tracing Denial of Service Vulnerability | ||
| CVE-2025-21257 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | ||
| CVE-2024-49065 | Med | 0.36 | 5.5 | 0.01 | Dec 12, 2024 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2024-43614 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally. | ||
| CVE-2024-43603 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Visual Studio Collector Service Denial of Service Vulnerability | ||
| CVE-2024-43585 | Med | 0.36 | 5.5 | 0.00 | Oct 8, 2024 | Code Integrity Guard Security Feature Bypass Vulnerability | ||
| CVE-2024-43571 | Med | 0.36 | 5.6 | 0.01 | Oct 8, 2024 | Sudo for Windows Spoofing Vulnerability | ||
| CVE-2024-43554 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Windows Kernel-Mode Driver Information Disclosure Vulnerability | ||
| CVE-2024-43546 | Med | 0.36 | 5.6 | 0.01 | Oct 8, 2024 | Windows Cryptographic Information Disclosure Vulnerability | ||
| CVE-2024-43508 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2024-43500 | Med | 0.36 | 5.5 | 0.01 | Oct 8, 2024 | Windows Resilient File System (ReFS) Information Disclosure Vulnerability | ||
| CVE-2024-38256 | Med | 0.36 | 5.5 | 0.01 | Sep 10, 2024 | Windows Kernel-Mode Driver Information Disclosure Vulnerability | ||
| CVE-2024-38254 | Med | 0.36 | 5.5 | 0.01 | Sep 10, 2024 | Windows Authentication Information Disclosure Vulnerability | ||
| CVE-2024-38155 | Med | 0.36 | 5.5 | 0.01 | Aug 13, 2024 | Security Center Broker Information Disclosure Vulnerability | ||
| CVE-2024-38151 | Med | 0.36 | 5.5 | 0.01 | Aug 13, 2024 | Windows Kernel Information Disclosure Vulnerability | ||
| CVE-2024-38122 | Med | 0.36 | 5.5 | 0.01 | Aug 13, 2024 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | ||
| CVE-2024-38118 | Med | 0.36 | 5.5 | 0.01 | Aug 13, 2024 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | ||
| CVE-2024-39379 | Med | 0.36 | 5.5 | 0.00 | Jul 31, 2024 | Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user… | ||
| CVE-2024-38056 | Med | 0.36 | 5.5 | 0.01 | Jul 9, 2024 | Microsoft Windows Codecs Library Information Disclosure Vulnerability | ||
| CVE-2024-38055 | Med | 0.36 | 5.5 | 0.01 | Jul 9, 2024 | Microsoft Windows Codecs Library Information Disclosure Vulnerability | ||
| CVE-2024-38041 | Med | 0.36 | 5.5 | 0.02 | Jul 9, 2024 | Windows Kernel Information Disclosure Vulnerability | ||
| CVE-2024-38017 | Med | 0.36 | 5.5 | 0.01 | Jul 9, 2024 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2024-30096 | Med | 0.36 | 5.5 | 0.01 | Jun 11, 2024 | Windows Cryptographic Services Information Disclosure Vulnerability | ||
| CVE-2024-30067 | Med | 0.36 | 5.5 | 0.01 | Jun 11, 2024 | Winlogon Elevation of Privilege Vulnerability | ||
| CVE-2024-30066 | Med | 0.36 | 5.5 | 0.01 | Jun 11, 2024 | Winlogon Elevation of Privilege Vulnerability | ||
| CVE-2024-30065 | Med | 0.36 | 5.5 | 0.01 | Jun 11, 2024 | Windows Themes Denial of Service Vulnerability | ||
| CVE-2024-30050 | Med | 0.36 | 5.4 | 0.11 | May 14, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability | ||
| CVE-2024-30039 | Med | 0.36 | 5.5 | 0.01 | May 14, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | ||
| CVE-2024-30037 | Med | 0.36 | 5.5 | 0.05 | May 14, 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-30034 | Med | 0.36 | 5.5 | 0.07 | May 14, 2024 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | ||
| CVE-2024-30016 | Med | 0.36 | 5.5 | 0.01 | May 14, 2024 | Windows Cryptographic Services Information Disclosure Vulnerability | ||
| CVE-2024-30008 | Med | 0.36 | 5.5 | 0.01 | May 14, 2024 | Windows DWM Core Library Information Disclosure Vulnerability | ||
| CVE-2024-29992 | Med | 0.36 | 5.5 | 0.01 | Apr 9, 2024 | Azure Identity Library for .NET Information Disclosure Vulnerability | ||
| CVE-2024-28902 | Med | 0.36 | 5.5 | 0.01 | Apr 9, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | ||
| CVE-2024-28901 | Med | 0.36 | 5.5 | 0.01 | Apr 9, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | ||
| CVE-2024-28900 | Med | 0.36 | 5.5 | 0.01 | Apr 9, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | ||
| CVE-2024-26255 | Med | 0.36 | 5.5 | 0.01 | Apr 9, 2024 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
- risk 0.36cvss 5.5epss 0.01
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.01
Windows CSC Service Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.00
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- risk 0.36cvss 5.6epss 0.01
Windows Cryptographic Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Event Tracing Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Office Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
- risk 0.36cvss 5.5epss 0.01
Visual Studio Collector Service Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.00
Code Integrity Guard Security Feature Bypass Vulnerability
- risk 0.36cvss 5.6epss 0.01
Sudo for Windows Spoofing Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel-Mode Driver Information Disclosure Vulnerability
- risk 0.36cvss 5.6epss 0.01
Windows Cryptographic Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel-Mode Driver Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Authentication Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Security Center Broker Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.00
Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user…
- risk 0.36cvss 5.5epss 0.01
Microsoft Windows Codecs Library Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Windows Codecs Library Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.02
Windows Kernel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Cryptographic Services Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Winlogon Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Winlogon Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Themes Denial of Service Vulnerability
- risk 0.36cvss 5.4epss 0.11
Windows Mark of the Web Security Feature Bypass Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.05
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.07
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Cryptographic Services Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows DWM Core Library Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Azure Identity Library for .NET Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Page 187 of 314