Known vulnerabilities in Microsoft Windows - page 60

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117285 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-55696
CWE-367 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015133
#VU117281 - Use After Free
CVE-2025-53768
CWE-416 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015130
#VU117278 - Cleartext Transmission of Sensitive Information
CVE-2025-53139
CWE-319 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB20251015126
#VU117235 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59284
CWE-200 Medium
Available
No
10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101592
#VU117233 - Use of a Key Past its Expiration Date
CVE-2025-48813
CWE-324 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101590
#VU117230 - Buffer over-read
CVE-2025-59192
CWE-126 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101587
#VU117229 - NULL Pointer Dereference
CVE-2025-55698
CWE-476 Medium
No
No
10 1607 10.0.14393.8519, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101586
#VU117228 - Use After Free
CVE-2025-55678
CWE-416 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101586
#VU117225 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59282
CWE-362 Medium
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101584
#VU117224 - Use After Free
CVE-2025-59202
CWE-416 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101583
#VU117223 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59200
CWE-362 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101582
#VU117221 - Improper Authentication
CVE-2025-55340
CWE-287 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101580
#VU117218 - Use After Free
CVE-2025-59210
CWE-416 Low
No
No
10 1607 10.0.14393.8519, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101577
#VU117212 - Information Exposure Through Log Files
CVE-2025-59203
CWE-532 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101571
#VU117206 - Information Exposure Through Log Files
CVE-2025-59197
CWE-532 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101564
#VU117204 - Resource exhaustion
CVE-2025-59502
CWE-400 Medium
No
No
10 21H2 10.0.19044.6332, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7792, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 15.10.2025 SB2025101562
#VU117203 - Heap-based Buffer Overflow
CVE-2025-59295
CWE-122 High
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101561
#VU117202 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59294
CWE-200 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101560
#VU117199 - Improper Authentication
CVE-2025-59280
CWE-287 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101557
#VU117198 - Heap-based Buffer Overflow
CVE-2025-59255
CWE-122 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 15.10.2025 SB2025101555


Showing elements 1181 - 1200 out of 6306