Skip to main content
CVE-2025-21310 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21309 Jan 14, 18:15 HIGH PATCH CERT-EU This Month

Windows Remote Desktop Services Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Windows RCE Microsoft Windows Server 2012 Windows Server 2016 +4
NVD
CVSS 3.1
8.1
EPSS
2.4%
CVE-2025-21308 Jan 14, 18:15 MEDIUM PATCH CERT-EU This Month

Windows Themes Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Windows Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11
NVD
CVSS 3.1
6.5
EPSS
0.7%
CVE-2025-21307 Jan 14, 18:15 CRITICAL PATCH CERT-EU This Week

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Windows RCE Use After Free Memory Corruption Microsoft +15
NVD
CVSS 3.1
9.8
EPSS
9.3%
CVE-2025-21306 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-21305 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2025-21304 Jan 14, 18:15 HIGH PATCH This Month

Microsoft DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +5
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2025-21303 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2025-21302 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2025-21301 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Geolocation Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Windows Authentication Bypass Information Disclosure Microsoft Windows 10 1507 +12
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2025-21300 Jan 14, 18:15 HIGH PATCH This Month

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Windows Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2025-21299 Jan 14, 18:15 HIGH PATCH This Month

Windows Kerberos Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Windows Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 +11
NVD
CVSS 3.1
7.1
EPSS
0.6%
CVE-2025-21298 Jan 14, 18:15 CRITICAL PATCH CERT-EU Act Now

Windows OLE Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 73.9%.

Windows RCE Use After Free Memory Corruption Microsoft +15
NVD
CVSS 3.1
9.8
EPSS
73.9%
CVE-2025-21297 Jan 14, 18:15 HIGH PATCH CERT-EU This Month

Windows Remote Desktop Services Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Windows RCE Use After Free Memory Corruption Microsoft +7
NVD
CVSS 3.1
8.1
EPSS
1.7%
CVE-2025-21296 Jan 14, 18:15 HIGH PATCH This Month

BranchCache Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2025-21295 Jan 14, 18:15 HIGH PATCH This Month

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
8.1
EPSS
1.7%
CVE-2025-21294 Jan 14, 18:15 HIGH PATCH CERT-EU This Month

Microsoft Digest Authentication Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12
NVD
CVSS 3.1
8.1
EPSS
1.9%
CVE-2025-21292 Jan 14, 18:15 HIGH PATCH This Month

Windows Search Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Windows RCE Microsoft Code Injection Windows 10 1809 +9
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2025-21291 Jan 14, 18:15 HIGH PATCH This Month

Windows Direct Show Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Microsoft Windows 10 1809 Windows 10 21h2 +6
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-21290 Jan 14, 18:15 HIGH PATCH This Month

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2025-21289 Jan 14, 18:15 HIGH PATCH This Month

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2025-21288 Jan 14, 18:15 MEDIUM PATCH This Month

Windows COM Server Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Windows Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
6.5
EPSS
0.2%
CVE-2025-21287 Jan 14, 18:15 HIGH PATCH This Month

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Windows Privilege Escalation Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2025-21286 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
3.3%
CVE-2025-21285 Jan 14, 18:15 HIGH PATCH This Month

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 38.8%.

Denial Of Service Null Pointer Dereference Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
7.5
EPSS
38.8%
CVE-2025-21284 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Virtual Trusted Platform Module Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Windows Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 +11
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2025-21282 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-21281 Jan 14, 18:15 HIGH PATCH This Month

Microsoft COM for Windows Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Windows Information Disclosure Use After Free Memory Corruption Microsoft +14
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2025-21280 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Virtual Trusted Platform Module Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Windows Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 +11
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2025-21278 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.

Windows Denial Of Service Race Condition Microsoft Windows 10 1507 +13
NVD
CVSS 3.1
6.2
EPSS
0.1%
CVE-2025-21277 Jan 14, 18:15 HIGH PATCH This Month

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 30.3%.

Buffer Overflow Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
7.5
EPSS
30.3%
CVE-2025-21276 Jan 14, 18:15 HIGH PATCH This Month

Windows MapUrlToZone Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows Denial Of Service Integer Overflow Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
7.5
EPSS
6.8%
CVE-2025-21275 Jan 14, 18:15 HIGH PATCH CERT-EU This Month

Windows App Package Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Windows Authentication Bypass Microsoft Windows 10 21h2 Windows 10 22h2 +6
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2025-21274 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Event Tracing Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Windows Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 +12
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-21273 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-21272 Jan 14, 18:15 MEDIUM PATCH This Month

Windows COM Server Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Windows Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
6.5
EPSS
0.2%
CVE-2025-21271 Jan 14, 18:15 HIGH PATCH This Month

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Windows Buffer Overflow Microsoft Windows 10 1809 Windows 10 21h2 +3
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2025-21270 Jan 14, 18:15 HIGH PATCH This Month

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2025-21269 Jan 14, 18:15 MEDIUM PATCH Monitor

Windows HTML Platforms Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 +13
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-21268 Jan 14, 18:15 MEDIUM PATCH Monitor

MapUrlToZone Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-21266 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-21265 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21263 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21261 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21260 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21258 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21257 Jan 14, 18:15 MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1607 +11
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-21256 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity.

Windows Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21255 Jan 14, 18:15 MEDIUM PATCH This Month

Windows Digital Media Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Windows Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +14
NVD
CVSS 3.1
6.6
EPSS
0.2%
CVE-2025-21252 Jan 14, 18:15 HIGH PATCH This Month

Windows Telephony Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Windows RCE Buffer Overflow Heap Overflow Microsoft +15
NVD
CVSS 3.1
8.8
EPSS
1.7%
Prev Page 4 of 10 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy