Search Results (Refine Search)
- Keyword (text search): cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2655:*:*:*:datacenter:*:x64:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2025-29824 |
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:16:08 PM -0400 |
V4.0:(not available) V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2025-27487 |
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. Published: April 08, 2025; 2:15:59 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26639 |
Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:47 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26637 |
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Published: April 08, 2025; 2:15:47 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26635 |
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network. Published: April 08, 2025; 2:15:47 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24074 |
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:46 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24073 |
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:46 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24062 |
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:46 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24060 |
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:46 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-21222 |
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. Published: April 08, 2025; 2:15:45 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-21191 |
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. Published: April 08, 2025; 2:15:44 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26645 |
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Published: March 11, 2025; 1:16:44 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26634 |
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network. Published: March 11, 2025; 1:16:43 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-26633 |
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. Published: March 11, 2025; 1:16:43 PM -0400 |
V4.0:(not available) V3.1: 7.0 HIGH V2.0:(not available) |
CVE-2025-25008 |
Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally. Published: March 11, 2025; 1:16:38 PM -0400 |
V4.0:(not available) V3.1: 7.1 HIGH V2.0:(not available) |
CVE-2025-24997 |
Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally. Published: March 11, 2025; 1:16:37 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24996 |
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Published: March 11, 2025; 1:16:36 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24995 |
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Published: March 11, 2025; 1:16:36 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
CVE-2025-24993 |
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Published: March 11, 2025; 1:16:35 PM -0400 |
V4.0:(not available) V3.1: 7.8 HIGH V2.0:(not available) |
CVE-2025-24992 |
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally. Published: March 11, 2025; 1:16:35 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |