Known vulnerabilities in Microsoft Windows - page 84

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107993 - Heap-based Buffer Overflow
CVE-2025-26634
CWE-122 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1607 10.0.14393.7969, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3194 28.04.2025 SB20250311117
#VU105529 - NULL Pointer Dereference
CVE-2025-24997
CWE-476 Low
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1607 10.0.14393.7876, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031169
#VU105528 - Heap-based Buffer Overflow
CVE-2025-24995
CWE-122 Low
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031168
#VU105527 - Untrusted Pointer Dereference
CVE-2025-24084
CWE-822 High
No
No
10 1607 10.0.14393.7876, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031167
#VU105526 - Improper Access Control
CVE-2025-24076
CWE-284 Low
Available
No
10 1607 10.0.14393.7876, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031166
#VU105525 - Improper Access Control
CVE-2025-24994
CWE-284 Low
No
No
10 1607 10.0.14393.7876, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031166
#VU105524 - Heap-based Buffer Overflow
CVE-2025-24051
CWE-122 High
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031165
#VU105521 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-24035
CWE-591 High
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031163
#VU105519 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-26645
CWE-22 High
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031162
#VU105518 - Improper input validation
CVE-2025-26633
CWE-20 Critical
Available
Exploited
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031161
#VU105517 - Incorrect Conversion between Numeric Types
CVE-2025-24059
CWE-681 Low
No
No
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031160
#VU105516 - Use After Free
CVE-2025-24983
CWE-416 High
No
Exploited
10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876 11.03.2025 SB2025031159
#VU105515 - Information Exposure Through Log Files
CVE-2025-24984
CWE-532 Medium
No
Exploited
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031158
#VU105514 - Heap-based Buffer Overflow
CVE-2025-24993
CWE-122 High
No
Exploited
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031157
#VU105513 - Out-of-bounds read
CVE-2025-24991
CWE-125 High
No
Exploited
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031156
#VU105512 - Integer overflow
CVE-2025-24985
CWE-190 High
No
Exploited
10 21H2 10.0.19044.5608, 10 22H2 10.0.19045.5608, 10 1507 10.0.10240.20947, 10 1607 10.0.14393.7876, 10 1809 10.0.17763.7009, 11 22H2 10.0.22621.5039, 11 23H2 10.0.22631.5039, 11 24H2 10.0.26100.3403, 11 24H2 10.0.26100.3476 11.03.2025 SB2025031155
#VU103826 - Improper Access Control
CVE-2025-21359
CWE-284 Low
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB20250211128
#VU103825 - Improper Authentication
CVE-2025-21349
CWE-287 High
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB20250211127
#VU103823 - Improper input validation
CVE-2025-21375
CWE-20 Low
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB20250211125
#VU103822 - Improper input validation
CVE-2025-21350
CWE-20 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB20250211124


Showing elements 1661 - 1680 out of 6306