Known vulnerabilities in Microsoft Windows - page 86

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103780 - Heap-based Buffer Overflow
CVE-2025-21418
CWE-122 High
No
Exploited
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021192
#VU103777 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-21391
CWE-59 Medium
No
Exploited
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021190
#VU103776 - Out-of-bounds read
CVE-2025-21216
CWE-125 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021189
#VU103775 - Out-of-bounds read
CVE-2025-21254
CWE-125 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021189
#VU103774 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21377
CWE-200 Medium
No
Exploited
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021188
#VU103773 - Resource exhaustion
CVE-2025-21352
CWE-400 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1507 10.0.10240.20915, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021189
#VU103772 - Out-of-bounds read
CVE-2025-21212
CWE-125 Medium
No
No
10 21H2 10.0.19044.5487, 10 22H2 10.0.19045.5487, 10 1607 10.0.14393.7785, 10 1809 10.0.17763.6893, 11 22H2 10.0.22621.4890, 11 23H2 10.0.22631.4890, 11 24H2 10.0.26100.3107 11.02.2025 SB2025021189
#VU102876 - Incorrect Permission Assignment for Critical Resource
CVE-2025-21325
CWE-732 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 17.01.2025 SB2025011705
#VU102806 - Improper input validation
CVE-2024-7344
CWE-20 Low
Available
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011550
SB2025061025
#VU102803 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21308
CWE-200 Medium
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.2894 15.01.2025 SB2025011547
#VU102802 - Use After Free
CVE-2025-21295
CWE-416 High
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011546
#VU102794 - Out-of-bounds read
CVE-2025-21215
CWE-125 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011541
#VU102793 - Protection Mechanism Failure
CVE-2025-21211
CWE-693 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011541
#VU102792 - Improper Access Control
CVE-2025-21213
CWE-284 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011541
#VU102791 - Improper Resolution of Path Equivalence
CVE-2025-21219
CWE-41 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.2894, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011540
#VU102790 - Improper Resolution of Path Equivalence
CVE-2025-21329
CWE-41 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011540
#VU102789 - Improper Resolution of Path Equivalence
CVE-2025-21328
CWE-41 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.2894, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011540
#VU102787 - Use After Free
CVE-2025-21298
CWE-416 High
Available
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.2894 15.01.2025 SB2025011538
#VU102783 - Resource exhaustion
CVE-2025-21231
CWE-400 Medium
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011529
#VU102782 - Improper Resolution of Path Equivalence
CVE-2025-21269
CWE-41 Low
No
No
10 21H2 10.0.19044.5371, 10 22H2 10.0.19045.5371, 10 1507 10.0.10240.20890, 10 1607 10.0.14393.7699, 10 1809 10.0.17763.6775, 11 22H2 10.0.22621.4751, 11 23H2 10.0.22631.4751, 11 24H2 10.0.26100.2894, 11 24H2 10.0.26100.3107 15.01.2025 SB2025011528


Showing elements 1701 - 1720 out of 6306