Known vulnerabilities in Microsoft Windows - page 66

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117007 - Untrusted Pointer Dereference
CVE-2025-24990
CWE-822 High
Available
Exploited
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 14.10.2025 SB2025101458
#VU117006 - Heap-based Buffer Overflow
CVE-2025-59254
CWE-122 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 14.10.2025 SB2025101457
#VU117005 - Heap-based Buffer Overflow
CVE-2025-58722
CWE-122 Low
No
No
10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 14.10.2025 SB2025101457
#VU115962 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59220
CWE-362 Low
No
No
10 21H2 10.0.19043.6332, 10 21H2 10.0.19044.6332, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 19.09.2025 SB20250919142
#VU115961 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59216
CWE-362 Low
No
No
10 1507 10.0.10240.21128, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 19.09.2025 SB20250919141
#VU115959 - Use After Free
CVE-2025-59215
CWE-416 Low
No
No
10 1507 10.0.10240.21128, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 19.09.2025 SB20250919139
#VU115130 - Heap-based Buffer Overflow
CVE-2025-54894
CWE-122 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091017
#VU115129 - Integer overflow
CVE-2025-54110
CWE-190 Low
Available
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091016
#VU115128 - Stack-based buffer overflow
CVE-2025-54099
CWE-121 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091015
#VU115127 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53804
CWE-200 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091014
#VU115113 - Improper Resolution of Path Equivalence
CVE-2025-54107
CWE-41 Medium
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091008
#VU115112 - Protection Mechanism Failure
CVE-2025-54917
CWE-693 Medium
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091008
#VU115111 - Out-of-bounds read
CVE-2025-53805
CWE-125 Medium
No
No
10 1507 10.0.10240.21128, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091007
#VU115110 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54913
CWE-362 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091006
#VU115109 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-49734
CWE-923 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091005
#VU115108 - Integer overflow
CVE-2025-54895
CWE-190 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091004
#VU115107 - Use After Free
CVE-2025-54111
CWE-416 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091003
#VU115106 - Use After Free
CVE-2025-54101
CWE-416 Medium
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909 10.09.2025 SB2025091002
#VU115105 - Improper Authentication
CVE-2025-55234
CWE-287 High
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 10.09.2025 SB2025091001
#VU115102 - Use After Free
CVE-2025-54911
CWE-416 Low
No
No
10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB20250909108


Showing elements 1301 - 1320 out of 6306