Known vulnerabilities in Microsoft Windows - page 127

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 8099
Public exploits: 491
Known exploited (KEV): 271

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 8099 known vulnerabilities: 99 critical, 1416 high, 1367 medium, 5217 low Critical High Medium Low

Vulnerabilities (8099)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102617 - Heap-based Buffer Overflow
CVE-2025-21333
CWE-122 High
Available
Exploited
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 14.01.2025 SB2025011444
#VU102616 - Use After Free
CVE-2025-21334
CWE-416 High
No
Exploited
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 14.01.2025 SB2025011444
#VU102615 - Use After Free
CVE-2025-21335
CWE-416 High
No
Exploited
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 14.01.2025 SB2025011444
#VU102605 - Heap-based Buffer Overflow
CVE-2025-21409
CWE-122 High
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 14.01.2025 SB2025011445
#VU102604 - Heap-based Buffer Overflow
CVE-2025-21413
CWE-122 High
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 14.01.2025 SB2025011445
#VU101605 - Improper Access Control
CVE-2024-49105
CWE-284 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602, 11 24H2 10.0.26100.2528 10.12.2024 SB20241210113
#VU101599 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49082
CWE-22 Medium
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB20241210111
#VU101591 - Improper Authentication
CVE-2024-49076
CWE-287 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB20241210109
#VU101554 - Heap-based Buffer Overflow
CVE-2024-49072
CWE-122 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB20241210103
#VU101551 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-49107
CWE-59 Medium
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB20241210101
#VU101550 - Return of Wrong Status Code
CVE-2024-49117
CWE-393 Medium
No
No
10 1607 10.0.14393.7606, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB20241210100
#VU101458 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-49124
CWE-362 High
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121096
#VU101448 - Use After Free
CVE-2024-49074
CWE-416 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1809 10.0.17763.6659, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121092
#VU101447 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-49084
CWE-362 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121091
#VU101446 - Out-of-bounds read
CVE-2024-49088
CWE-125 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602, 11 24H2 10.0.26100.2528, 11 24H2 10.0.26100.2605 10.12.2024 SB2024121090
#VU101445 - Untrusted Pointer Dereference
CVE-2024-49090
CWE-822 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602, 11 24H2 10.0.26100.2528 10.12.2024 SB2024121090
#VU101443 - Heap-based Buffer Overflow
CVE-2024-49080
CWE-122 Medium
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121088
#VU101437 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-49095
CWE-591 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602, 11 24H2 10.0.26100.2528 10.12.2024 SB2024121085
#VU101436 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-49097
CWE-591 Low
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121085
#VU101435 - Use After Free
CVE-2024-49126
CWE-416 High
No
No
10 21H2 10.0.19044.5247, 10 22H2 10.0.19045.5247, 10 1507 10.0.10240.20857, 10 1607 10.0.14393.7606, 10 1809 10.0.17763.6659, 11 22H2 10.0.22621.4602, 11 23H2 10.0.22631.4602 10.12.2024 SB2024121084


Showing elements 2521 - 2540 out of 8099