Microsoft
Page 54 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21301 | Medium | 6.5 | 2025-01-14 | Windows Geolocation Service Information Disclosure Vulnerability |
CVE-2025-21300 | High | 7.5 | 2025-01-14 | Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
CVE-2025-21299 | High | 7.1 | 2025-01-14 | Windows Kerberos Security Feature Bypass Vulnerability |
CVE-2025-21298 | Critical | 9.8 | 2025-01-14 | Windows OLE Remote Code Execution Vulnerability |
CVE-2025-21297 | High | 8.1 | 2025-01-14 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2025-21296 | High | 7.5 | 2025-01-14 | BranchCache Remote Code Execution Vulnerability |
CVE-2025-21295 | High | 8.1 | 2025-01-14 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
CVE-2025-21294 | High | 8.1 | 2025-01-14 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21293 | High | 8.8 | 2025-01-14 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2025-21292 | High | 8.8 | 2025-01-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2025-21291 | High | 8.8 | 2025-01-14 | Windows Direct Show Remote Code Execution Vulnerability |
CVE-2025-21290 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21289 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21288 | Medium | 6.5 | 2025-01-14 | Windows COM Server Information Disclosure Vulnerability |
CVE-2025-21287 | High | 7.8 | 2025-01-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2025-21286 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21285 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21284 | Medium | 5.5 | 2025-01-14 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
CVE-2025-21282 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21281 | High | 7.8 | 2025-01-14 | Microsoft COM for Windows Elevation of Privilege Vulnerability |
CVE-2025-21280 | Medium | 5.5 | 2025-01-14 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
CVE-2025-21278 | Medium | 6.2 | 2025-01-14 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2025-21277 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21276 | High | 7.5 | 2025-01-14 | Windows MapUrlToZone Denial of Service Vulnerability |
CVE-2025-21275 | High | 7.8 | 2025-01-14 | Windows App Package Installer Elevation of Privilege Vulnerability |
CVE-2025-21274 | Medium | 5.5 | 2025-01-14 | Windows Event Tracing Denial of Service Vulnerability |
CVE-2025-21273 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21272 | Medium | 6.5 | 2025-01-14 | Windows COM Server Information Disclosure Vulnerability |
CVE-2025-21271 | High | 7.8 | 2025-01-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2025-21270 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21269 | Medium | 4.3 | 2025-01-14 | Windows HTML Platforms Security Feature Bypass Vulnerability |
CVE-2025-21268 | Medium | 4.3 | 2025-01-14 | MapUrlToZone Security Feature Bypass Vulnerability |
CVE-2025-21266 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21265 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21263 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21261 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21260 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21258 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21257 | Medium | 5.5 | 2025-01-14 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
CVE-2025-21256 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21255 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21252 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21251 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21250 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21249 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21248 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21246 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21245 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21244 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21243 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21242 | Medium | 5.9 | 2025-01-14 | Windows Kerberos Information Disclosure Vulnerability |
CVE-2025-21241 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21240 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21239 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21238 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21237 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21236 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21235 | High | 7.8 | 2025-01-14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2025-21234 | High | 7.8 | 2025-01-14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2025-21233 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21232 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21231 | High | 7.5 | 2025-01-14 | IP Helper Denial of Service Vulnerability |
CVE-2025-21230 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21229 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21228 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21227 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21226 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21225 | Medium | 5.9 | 2025-01-14 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2025-21224 | High | 8.1 | 2025-01-14 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2025-21223 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21220 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2025-21219 | Medium | 4.3 | 2025-01-14 | MapUrlToZone Security Feature Bypass Vulnerability |
CVE-2025-21218 | High | 7.5 | 2025-01-14 | Windows Kerberos Denial of Service Vulnerability |
CVE-2025-21217 | Medium | 6.5 | 2025-01-14 | Windows NTLM Spoofing Vulnerability |
CVE-2025-21215 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21214 | Medium | 4.2 | 2025-01-14 | Windows BitLocker Information Disclosure Vulnerability |
CVE-2025-21213 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21211 | Medium | 6.8 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21210 | Medium | 4.2 | 2025-01-14 | Windows BitLocker Information Disclosure Vulnerability |
CVE-2025-21207 | High | 7.5 | 2025-01-14 | Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability |
CVE-2025-21202 | Medium | 6.1 | 2025-01-14 | Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
CVE-2025-21193 | Medium | 6.5 | 2025-01-14 | Active Directory Federation Server Spoofing Vulnerability |
CVE-2025-21189 | Medium | 4.3 | 2025-01-14 | MapUrlToZone Security Feature Bypass Vulnerability |
CVE-2025-21187 | High | 7.8 | 2025-01-14 | Microsoft Power Automate Remote Code Execution Vulnerability |
CVE-2025-21186 | High | 7.8 | 2025-01-14 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2025-21178 | High | 8.8 | 2025-01-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21176 | High | 8.8 | 2025-01-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21173 | High | 7.3 | 2025-01-14 | .NET Elevation of Privilege Vulnerability |
CVE-2025-21172 | High | 7.5 | 2025-01-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21171 | High | 7.5 | 2025-01-14 | .NET Remote Code Execution Vulnerability |
CVE-2024-52898 | Medium | 6.2 | 2025-01-14 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when a detailed technical error message is ret… |
CVE-2024-51456 | Medium | 5.9 | 2025-01-12 | IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed t… |
CVE-2021-29669 | Medium | 5.4 | 2025-01-12 | IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… |
CVE-2025-21380 | High | 8.8 | 2025-01-09 | Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network. |
CVE-2025-21385 | High | 8.8 | 2025-01-09 | A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network. |
CVE-2024-43176 | Medium | 5.4 | 2025-01-09 | IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users. |
CVE-2024-40702 | High | 8.2 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resou… |
CVE-2024-28778 | Medium | 6.5 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to pub… |
CVE-2024-25037 | Medium | 4.3 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is retur… |
CVE-2022-22363 | Medium | 4.3 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical e… |