Filtered by vendor Microsoft Subscriptions
Filtered by product Windows 11 Subscriptions
Total 648 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-50168 1 Microsoft 11 Server, Windows, Windows 11 and 8 more 2025-08-28 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-50167 1 Microsoft 20 Hyper-v, Windows, Windows 10 and 17 more 2025-08-28 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-50159 1 Microsoft 19 Windows, Windows 10, Windows 10 1507 and 16 more 2025-08-28 7.3 High
Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
CVE-2025-50153 1 Microsoft 19 Server, Windows, Windows 10 and 16 more 2025-08-28 7.8 High
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-49762 1 Microsoft 21 Windows, Windows 10, Windows 10 1507 and 18 more 2025-08-28 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-49743 1 Microsoft 21 Windows, Windows 10, Windows 10 1507 and 18 more 2025-08-28 6.7 Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-55230 1 Microsoft 5 Windows, Windows 10, Windows 11 and 2 more 2025-08-28 7.8 High
Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
CVE-2025-49751 1 Microsoft 19 Hyper-v, Server, Windows and 16 more 2025-08-28 6.8 Medium
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
CVE-2022-44666 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-08-27 7.8 High
Windows Contacts Remote Code Execution Vulnerability
CVE-2022-38044 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-08-27 7.8 High
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
CVE-2022-34704 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-08-27 4.7 Medium
Windows Defender Credential Guard Information Disclosure Vulnerability
CVE-2022-40732 1 Microsoft 3 Windows 11, Windows 11 21h2, Windows Server 2022 2025-08-26 5 Medium
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.
CVE-2025-49733 1 Microsoft 13 Windows, Windows 10, Windows 10 1809 and 10 more 2025-08-23 7.8 High
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-49730 1 Microsoft 18 Windows, Windows 10, Windows 10 1507 and 15 more 2025-08-23 7.8 High
Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
CVE-2025-49722 1 Microsoft 18 Windows, Windows 10, Windows 10 1507 and 15 more 2025-08-23 5.7 Medium
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.
CVE-2025-49675 1 Microsoft 18 Windows, Windows 10, Windows 10 1507 and 15 more 2025-08-23 7.8 High
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-49667 1 Microsoft 18 Windows, Windows 10, Windows 10 1507 and 15 more 2025-08-23 7.8 High
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-48818 1 Microsoft 17 Bitlocker, Windows, Windows 10 and 14 more 2025-08-23 6.8 Medium
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-48003 1 Microsoft 14 Bitlocker, Windows, Windows 10 and 11 more 2025-08-23 6.8 Medium
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-48001 1 Microsoft 17 Windows, Windows 10, Windows 10 1507 and 14 more 2025-08-23 6.8 Medium
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.