Known vulnerabilities in Microsoft Windows - page 75

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112508 - Heap-based Buffer Overflow
CVE-2025-49721
CWE-122 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070851
#VU112507 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-49680
CWE-59 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070850
#VU112506 - Use After Free
CVE-2025-47976
CWE-416 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070849
#VU112505 - Double Free
CVE-2025-47975
CWE-415 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070849
#VU112504 - Type confusion
CVE-2025-48815
CWE-843 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070849
#VU112503 - Integer overflow
CVE-2025-49683
CWE-190 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070848
#VU112502 - Integer overflow
CVE-2025-49689
CWE-190 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070848
#VU112501 - Out-of-bounds read
CVE-2025-47973
CWE-125 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070848
#VU112500 - Out-of-bounds read
CVE-2025-47971
CWE-125 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070848
#VU112477 - Exposure of sensitive information to an unauthorized actor
CVE-2025-47980
CWE-200 Low
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070841
#VU112476 - Integer overflow
CVE-2025-48002
CWE-190 Medium
No
No
10 1607 10.0.14393.8246, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070840
#VU112475 - Missing Synchronization
CVE-2025-47999
CWE-820 Medium
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070840
#VU112474 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48817
CWE-22 High
No
No
10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 08.07.2025 SB2025070839
#VU111029 - Untrusted Pointer Dereference
CVE-2025-3052
CWE-822 Low
Available
No
10 21H2 10.0.19044.5965, 10 22H2 10.0.19045.5965, 10 1507 10.0.10240.21034, 10 1607 10.0.14393.8148, 10 1809 10.0.17763.7434, 11 22H2 10.0.22621.5472, 11 23H2 10.0.22631.5472, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 11.06.2025 SB2025061102
#VU111026 - Improper Access Control
CVE-2025-32722
CWE-284 Low
No
No
10 21H2 10.0.19044.5965, 10 22H2 10.0.19045.5965, 10 1507 10.0.10240.21034, 10 1607 10.0.14393.8148, 10 1809 10.0.17763.7434, 11 22H2 10.0.22621.5472, 11 23H2 10.0.22631.5472, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 10.06.2025 SB20250610112
#VU111025 - Heap-based Buffer Overflow
CVE-2025-32713
CWE-122 Low
No
No
10 21H2 10.0.19044.5965, 10 22H2 10.0.19045.5965, 10 1507 10.0.10240.21034, 10 1607 10.0.14393.8148, 10 1809 10.0.17763.7434, 11 22H2 10.0.22621.5472, 11 23H2 10.0.22631.5472, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 10.06.2025 SB20250610111
#VU110755 - Missing release of memory after effective lifetime
CVE-2025-29828
CWE-401 High
No
No
11 22H2 10.0.22621.5472, 11 23H2 10.0.22631.5472, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 10.06.2025 SB2025061096
#VU110753 - Improper Privilege Management
CVE-2025-47955
CWE-269 Low
No
No
10 21H2 10.0.19044.5854, 10 22H2 10.0.19045.5854, 10 1507 10.0.10240.21014, 10 1607 10.0.14393.8066, 10 1607 10.0.14393.8148, 10 1809 10.0.17763.7314, 11 22H2 10.0.22621.5335, 11 23H2 10.0.22631.5335, 11 24H2 10.0.26100.3981, 11 24H2 10.0.26100.4061 10.06.2025 SB2025061094
#VU110752 - Use of Uninitialized Resource
CVE-2025-33070
CWE-908 High
No
No
10 21H2 10.0.19044.5965, 10 22H2 10.0.19045.5965, 10 1507 10.0.10240.21034, 10 1607 10.0.14393.8148, 10 1809 10.0.17763.7434, 11 22H2 10.0.22621.5472, 11 23H2 10.0.22631.5472, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 10.06.2025 SB2025061093
#VU110749 - Improper Verification of Cryptographic Signature
CVE-2025-33069
CWE-347 Low
No
No
10 1607 10.0.14393.8148, 11 24H2 10.0.26100.4270, 11 24H2 10.0.26100.4349 10.06.2025 SB2025061090


Showing elements 1481 - 1500 out of 6306