Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 98

Export CSV
CVE-2025-55328

Windows Hyper-V Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Hyper-v Server Windows and 25 more
CVE-2025-59287

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 9.8 Critical EPSS 100.0% KEV · Listed
Vendors
Microsoft
Products
Server Server Service Windows Server and 9 more
CVE-2025-59260

Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Server Windows Server 2016 and 5 more
CVE-2025-55332

Windows BitLocker Security Feature Bypass Vulnerability

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Bitlocker Server Windows and 21 more
CVE-2025-50157

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Server Service Windows and 14 more
CVE-2025-53722

Windows Remote Desktop Services Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 31.8% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 1507 and 25 more
CVE-2025-53721

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 1809 and 17 more
CVE-2025-53719

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 2008 and 13 more
CVE-2025-53716

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 and 19 more
CVE-2025-53156

Windows Storage Port Driver Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 11 24h2 and 6 more
CVE-2025-53153

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 2008 and 13 more
CVE-2025-53152

Desktop Windows Manager Remote Code Execution Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 1507 and 21 more
CVE-2025-53148

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 2008 and 13 more
CVE-2025-53138

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 2008 and 13 more
CVE-2025-50172

DirectX Graphics Kernel Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 and 19 more
CVE-2025-50171

Remote Desktop Spoofing Vulnerability

Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1 · 9.1 Critical EPSS 1.1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 21h2 and 9 more
CVE-2025-50170

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 1809 and 17 more
CVE-2025-50156

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 5.7 Medium EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 2008 and 13 more
CVE-2025-50153

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Server Windows Windows 10 and 22 more
CVE-2025-49759

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Server Sql Server Sql Server 2016 and 3 more