Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,174

Export CSV
CVE-2025-59201

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 1507 Windows 10 1607 Windows 10 1809 and 23 more
CVE-2025-59242

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 1507 Windows 10 1607 Windows 10 1809 and 23 more
CVE-2025-49708

Microsoft Graphics Component Elevation of Privilege Vulnerability

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 9.9 Critical EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Graphics Component Windows Windows 10 and 20 more
CVE-2025-59255

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 19 more
CVE-2025-59282

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Iis Windows Windows 10 and 28 more
CVE-2025-59295

Windows URL Parsing Remote Code Execution Vulnerability

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Microsoft
Products
Internet Explorer Windows Windows 10 and 28 more
CVE-2025-48813

Virtual Secure Mode Spoofing Vulnerability

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 19 more
CVE-2025-25004

PowerShell Elevation of Privilege Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Powershell Windows Windows 10 and 28 more
CVE-2025-53150

Windows Digital Media Elevation of Privilege Vulnerability

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 19 more
CVE-2025-50175

Windows Digital Media Elevation of Privilege Vulnerability

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 20 more
CVE-2025-53139

Windows Hello Security Feature Bypass Vulnerability

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 21h2 and 14 more
CVE-2025-55326

Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 17 more
CVE-2025-55328

Windows Hyper-V Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Hyper-v Server Windows and 25 more
CVE-2025-55331

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 21h2 and 17 more
CVE-2025-55678

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Directx Windows Windows 10 and 27 more
CVE-2025-55680

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1809 and 19 more
CVE-2025-55692

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS 3.6% KEV · Not listed
Vendors
Microsoft
Products
Windows Windows 10 Windows 10 1507 and 24 more