Known vulnerabilities in Microsoft Windows - page 71

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113901 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-53132
CWE-362 Medium
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081275
#VU113900 - Type confusion
CVE-2025-50168
CWE-843 Low
Available
No
10 1507 10.0.10240.21100, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081275
#VU113894 - Heap-based Buffer Overflow
CVE-2025-50161
CWE-122 Low
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081275
#VU113848 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-48807
CWE-923 Low
No
No
10 21H2 10.0.19044.6093, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 24H2 10.0.26100.4652 12.08.2025 SB2025081267
#VU113847 - Numeric Truncation Error
CVE-2025-53723
CWE-197 Low
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081267
#VU113845 - Heap-based Buffer Overflow
CVE-2025-53155
CWE-122 Low
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081267
#VU113844 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-50167
CWE-362 Low
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081267
#VU113843 - Missing Synchronization
CVE-2025-49751
CWE-820 Medium
No
No
10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 12.08.2025 SB2025081267
#VU112704 - Exposure of sensitive information to an unauthorized actor
CVE-2025-36350
CWE-200 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709127
#VU112703 - Exposure of sensitive information to an unauthorized actor
CVE-2025-36357
CWE-200 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709126
#VU112701 - Protection Mechanism Failure
CVE-2025-49740
CWE-693 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709117
#VU112699 - Insufficient UI Warning of Dangerous Operations
CVE-2025-33054
CWE-357 High
No
No
10 1607 10.0.14393.8246, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709115
#VU112689 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49690
CWE-362 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709108
#VU112675 - Heap-based Buffer Overflow
CVE-2025-47981
CWE-122 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709101
#VU112662 - Missing Authentication for Critical Function
CVE-2025-48814
CWE-306 Medium
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709100
#VU112658 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48808
CWE-200 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070998
#VU112657 - Processor optimization removal or modification of security-critical code
CVE-2025-26636
CWE-1037 Low
No
No
10 1607 10.0.14393.8246, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070998
#VU112647 - Integer overflow
CVE-2025-48816
CWE-190 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070995
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357
CWE-1342 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350
CWE-1342 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more


Showing elements 1401 - 1420 out of 6306