Microsoft update

KB5049983

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.3091
Windows Server 2022 (Server Core installation) 10.0.20348.3091

Fixes 121 records

TI-2025-15266 CVE-2025-21298 · GHSA-f7p3-668r-j598

Windows OLE Remote Code Execution Vulnerability

CRITICAL 87

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74369 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-416

TI-2025-15253 CVE-2025-21285 · GHSA-w2xr-7cgg-6wx5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 72

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.56161 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-476

TI-2025-15245 CVE-2025-21277 · GHSA-3jcg-qpj5-r3rp

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 66

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.39056 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-126

TI-2025-15261 CVE-2025-21293 · GHSA-8cgg-rcwg-mmh6

Active Directory Domain Services Elevation of Privilege Vulnerability

MEDIUM 56

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.14986 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-284

TI-2025-15277 CVE-2025-21309 · GHSA-cwpx-vh5m-58gx

Windows Remote Desktop Services Remote Code Execution Vulnerability

MEDIUM 53

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.15064 Published 2025-01-14 Fixed in 6.2.9200.25273, 6.3.9600.22371 +5 CWE-591

TI-2025-15275 CVE-2025-21307 · GHSA-j9w9-6jj7-c2px

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

MEDIUM 53

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01937 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-416

TI-2025-15268 CVE-2025-21300 · GHSA-2jcp-473g-fc9m

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

MEDIUM 44

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02568 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15244 CVE-2025-21276 · GHSA-cx2h-5vcq-pfj4

Windows MapUrlToZone Denial of Service Vulnerability

MEDIUM 44

Windows MapUrlToZone Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02456 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-191

TI-2025-15219 CVE-2025-21251 · GHSA-gqc7-gjgf-xvmg

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02628 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15199 CVE-2025-21231 · GHSA-3hqw-55xh-q6hf

IP Helper Denial of Service Vulnerability

MEDIUM 44

IP Helper Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02628 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15198 CVE-2025-21230 · GHSA-83vh-f4w7-rg8v

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02724 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-20

TI-2025-15186 CVE-2025-21218 · GHSA-vrvf-5hvc-h4g2

Windows Kerberos Denial of Service Vulnerability

MEDIUM 44

Windows Kerberos Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02626 Published 2025-01-14 Fixed in 6.2.9200.25273, 6.3.9600.22371 +5 CWE-400

TI-2025-15355 CVE-2025-21389 · GHSA-8fj2-r7qc-chj6

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

MEDIUM 43

Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01967 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15298 CVE-2025-21330 · GHSA-5qjq-4w4h-57jf

Windows Remote Desktop Services Denial of Service Vulnerability

MEDIUM 43

Windows Remote Desktop Services Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02086 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +7 CWE-400

TI-2025-15274 CVE-2025-21306 · GHSA-v9wq-479p-2jwm

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15273 CVE-2025-21305 · GHSA-w8wg-643q-c36v

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15271 CVE-2025-21303 · GHSA-mwq3-xjfp-cjg3

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15270 CVE-2025-21302 · GHSA-9g28-fpjj-mjvm

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15259 CVE-2025-21291 · GHSA-qcv4-8qfq-9w76

Windows Direct Show Remote Code Execution Vulnerability

MEDIUM 43

Windows Direct Show Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01416 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +5 CWE-415

TI-2025-15258 CVE-2025-21290 · GHSA-w825-mc9p-6wp6

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15257 CVE-2025-21289 · GHSA-rpr6-945p-jm7x

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15254 CVE-2025-21286 · GHSA-2p7g-v48x-6m2c

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15250 CVE-2025-21282 · GHSA-6v58-wchf-wjx9

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15241 CVE-2025-21273 · GHSA-v6xj-8rhx-w2r4

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15238 CVE-2025-21270 · GHSA-6xwm-5jc9-ww35

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15234 CVE-2025-21266 · GHSA-9rg8-84xx-j7x9

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15220 CVE-2025-21252 · GHSA-hgjf-cqqh-7c7c

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15218 CVE-2025-21250 · GHSA-7pgh-vvx6-7g2r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15216 CVE-2025-21248 · GHSA-54g3-mjpm-fvf4

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01511 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-122

TI-2025-15214 CVE-2025-21246 · GHSA-c735-gp9w-6hcw

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15213 CVE-2025-21245 · GHSA-wjm7-5g3p-88v2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15212 CVE-2025-21244 · GHSA-r6pg-vpjp-mw6r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-190

TI-2025-15211 CVE-2025-21243 · GHSA-qrj7-3jjm-h7x2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-190

TI-2025-15209 CVE-2025-21241 · GHSA-rwr7-2j6f-mmh5

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01511 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-122

TI-2025-15208 CVE-2025-21240 · GHSA-4wmv-7xrq-8xxw

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15207 CVE-2025-21239 · GHSA-j3cc-8qj5-mgjv

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01511 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-122

TI-2025-15206 CVE-2025-21238 · GHSA-49vp-7qg3-f9gx

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15205 CVE-2025-21237 · GHSA-hrqr-g8jf-f28f

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15204 CVE-2025-21236 · GHSA-w4cp-3f3m-xjx3

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15201 CVE-2025-21233 · GHSA-7hxv-jvhc-mgrx

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15191 CVE-2025-21223 · GHSA-hxxh-jpvq-vr5x

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15188 CVE-2025-21220 · GHSA-9qg4-92rx-rmr9

Microsoft Message Queuing Information Disclosure Vulnerability

MEDIUM 43

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02106 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15176 CVE-2025-21207 · GHSA-cmq9-p2jc-99cw

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

MEDIUM 43

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02138 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +6 CWE-400

TI-2025-15381 CVE-2025-21417 · GHSA-2jqv-6gjj-98r2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01187 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15377 CVE-2025-21413 · GHSA-h4x8-pvww-m327

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15376 CVE-2025-21411 · GHSA-p246-2wqm-73pp

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15374 CVE-2025-21409 · GHSA-44vv-6vcv-9h7r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15307 CVE-2025-21339 · GHSA-2p5v-755j-54f5

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15260 CVE-2025-21292 · GHSA-5chq-jmvj-p6gp

Windows Search Service Elevation of Privilege Vulnerability

MEDIUM 42

Windows Search Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00825 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +6 CWE-94

TI-2025-15300 CVE-2025-21332 · GHSA-3pvj-gf5m-rhhf

MapUrlToZone Security Feature Bypass Vulnerability

MEDIUM 41

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01495 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15263 CVE-2025-21295 · GHSA-w9m7-qmvh-fvcw

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

MEDIUM 41

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01633 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-416

TI-2025-15192 CVE-2025-21224 · GHSA-v4f3-8wwc-j9x2

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

MEDIUM 41

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01936 Published 2025-01-14 Fixed in 10.0.19044.5371, 10.0.19045.5371 +5 CWE-416

TI-2025-15267 CVE-2025-21299 · GHSA-93jj-pg4p-vc4v

Windows Kerberos Security Feature Bypass Vulnerability

MEDIUM 40

Windows Kerberos Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02229 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-922

TI-2025-15265 CVE-2025-21297 · GHSA-w569-9p5v-c7v7

Windows Remote Desktop Services Remote Code Execution Vulnerability

MEDIUM 40

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2025-01-14 Fixed in 6.1.7601.27520, 6.2.9200.25273 +6 CWE-416

TI-2025-15262 CVE-2025-21294 · GHSA-7h9g-r6hv-4q98

Microsoft Digest Authentication Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01226 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-591

TI-2024-32781 CVE-2024-49120 · GHSA-5pqw-jjjw-gf67

Windows Remote Desktop Services Remote Code Execution Vulnerability

LOW 39

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01095 Published 2024-12-10 Fixed in 6.2.9200.25222, 6.3.9600.22371 +5 CWE-453

TI-2025-15349 CVE-2025-21382 · GHSA-ch9j-hgv4-89cv

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00507 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +6 CWE-122

TI-2025-15345 CVE-2025-21378 · GHSA-qqjh-p6qj-wj2q

Windows CSC Service Elevation of Privilege Vulnerability

LOW 37

Windows CSC Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00568 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-122

TI-2025-15306 CVE-2025-21338 · GHSA-88gx-r57m-pghv

GDI+ Remote Code Execution Vulnerability

LOW 37

GDI+ Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00483 Published 2025-01-14 Fixed in 16.0.18429.20000, 2.93.24123014 +16 CWE-190

TI-2025-15255 CVE-2025-21287 · GHSA-wjfg-g3gx-pmfx

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00554 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-269

TI-2025-15249 CVE-2025-21281 · GHSA-3p4r-352r-f284

Microsoft COM for Windows Elevation of Privilege Vulnerability

LOW 37

Microsoft COM for Windows Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-416

TI-2025-15243 CVE-2025-21275 · GHSA-xw7m-49qm-2x39

Windows App Package Installer Elevation of Privilege Vulnerability

LOW 37

Windows App Package Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00623 Published 2025-01-14 Fixed in 10.0.19044.5371, 10.0.19045.5371 +5 CWE-285

TI-2025-15239 CVE-2025-21271 · GHSA-3fqg-54mc-wmg3

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

LOW 37

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00545 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +2 CWE-126

TI-2025-15203 CVE-2025-21235 · GHSA-rh7v-6pc9-xcj8

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

LOW 37

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00597 Published 2025-01-14 Fixed in 10.0.19044.5371, 10.0.19045.5371 +5 CWE-20

TI-2025-15202 CVE-2025-21234 · GHSA-f37h-289m-fjrc

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

LOW 37

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00597 Published 2025-01-14 Fixed in 10.0.19044.5371, 10.0.19045.5371 +5 CWE-20

TI-2025-15299 CVE-2025-21331 · GHSA-qxh8-4p4c-qchr

Windows Installer Elevation of Privilege Vulnerability

LOW 36

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01063 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-59

TI-2025-15264 CVE-2025-21296 · GHSA-r4x4-pw96-gj4q

BranchCache Remote Code Execution Vulnerability

LOW 36

BranchCache Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00789 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-416

TI-2025-15295 CVE-2025-21327 · GHSA-3v2q-pqp4-rfp4

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15292 CVE-2025-21324 · GHSA-fcxq-5j9x-8f72

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15278 CVE-2025-21310 · GHSA-c6gj-jrcc-q2j8

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15276 CVE-2025-21308 · GHSA-fw67-4j8q-76gw

Windows Themes Spoofing Vulnerability

LOW 33

Windows Themes Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02162 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +9 CWE-200

TI-2025-15233 CVE-2025-21265 · GHSA-9fhh-4gq6-pq2g

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15231 CVE-2025-21263 · GHSA-c5jj-jmhg-pcj9

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15229 CVE-2025-21261 · GHSA-mwvv-h2v8-35j6

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15228 CVE-2025-21260 · GHSA-6q64-xfhv-9jpq

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15226 CVE-2025-21258 · GHSA-j58w-j7x2-v25v

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15224 CVE-2025-21256 · GHSA-rv7m-pr5x-3rwr

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15223 CVE-2025-21255 · GHSA-r7wm-q44r-7365

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15217 CVE-2025-21249 · GHSA-r8vg-q4g8-j937

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15200 CVE-2025-21232 · GHSA-h723-vq6q-mqgg

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15197 CVE-2025-21229 · GHSA-994m-778q-r536

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-125

TI-2025-15196 CVE-2025-21228 · GHSA-f6jw-ch5j-r8hr

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15195 CVE-2025-21227 · GHSA-q38m-5f88-27wv

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15194 CVE-2025-21226 · GHSA-jf89-rq94-wxx7

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0088 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15185 CVE-2025-21217 · GHSA-2gwv-hh3j-cx86

Windows NTLM Spoofing Vulnerability

LOW 33

Windows NTLM Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01975 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-693

TI-2025-15179 CVE-2025-21211 · GHSA-cmqq-5rp5-x675

Secure Boot Security Feature Bypass Vulnerability

LOW 33

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00784 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-693

TI-2025-15309 CVE-2025-21341 · GHSA-g98c-v7wv-8hq9

Windows Digital Media Elevation of Privilege Vulnerability

LOW 32

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00708 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15282 CVE-2025-21314 · GHSA-3p76-rm7j-ghq5

Windows SmartScreen Spoofing Vulnerability

LOW 32

Windows SmartScreen Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01391 Published 2025-01-14 Fixed in 10.0.14393.7699, 10.0.17763.6775 +7 CWE-451

TI-2025-15269 CVE-2025-21301 · GHSA-g4jw-4wjw-mvmw

Windows Geolocation Service Information Disclosure Vulnerability

LOW 32

Windows Geolocation Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01531 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-284

TI-2025-15171 CVE-2025-21202 · GHSA-8v9j-24jq-vx9h

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

LOW 31

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00892 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-284

TI-2025-15256 CVE-2025-21288 · GHSA-pxf8-r239-8j9j

Windows COM Server Information Disclosure Vulnerability

LOW 30

Windows COM Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00712 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15240 CVE-2025-21272 · GHSA-m35h-5xhm-6j2c

Windows COM Server Information Disclosure Vulnerability

LOW 30

Windows COM Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00712 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15210 CVE-2025-21242 · GHSA-hxqj-2w4q-6p3c

Windows Kerberos Information Disclosure Vulnerability

LOW 30

Windows Kerberos Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01611 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-200

TI-2025-15193 CVE-2025-21225 · GHSA-qgf5-w7jw-p449

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

LOW 30

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01653 Published 2025-01-14 Fixed in 10.0.14393.7699, 10.0.17763.6775 +3 CWE-843

TI-2025-15163 CVE-2025-21193 · GHSA-4wgp-9wjx-2m53

Active Directory Federation Server Spoofing Vulnerability

LOW 30

Active Directory Federation Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00741 Published 2025-01-14 Fixed in 10.0.14393.7699, 10.0.17763.6775 +3 CWE-352

TI-2025-15246 CVE-2025-21278 · GHSA-6394-43ww-pm3c

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

LOW 28

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00574 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-362

TI-2025-15291 CVE-2025-21323 · GHSA-v5w4-fvfm-37m6

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.009 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-532

TI-2025-15289 CVE-2025-21321 · GHSA-pfvh-3w7h-4375

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-532

TI-2025-15288 CVE-2025-21320 · GHSA-ww6w-vmf9-9rg3

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-532

TI-2025-15287 CVE-2025-21319 · GHSA-mmw4-f58v-gj6m

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-532

TI-2025-15286 CVE-2025-21318 · GHSA-9747-347m-wjjq

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-532

TI-2025-15285 CVE-2025-21317 · GHSA-mfpq-3jm4-gh33

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.009 Published 2025-01-14 Fixed in 10.0.19044.5371, 10.0.19045.5371 +5 CWE-532

TI-2025-15284 CVE-2025-21316 · GHSA-6mv2-fmxx-35jg

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +9 CWE-532

TI-2025-15237 CVE-2025-21269 · GHSA-jf83-84h5-5cc4

Windows HTML Platforms Security Feature Bypass Vulnerability

LOW 27

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.04497 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15341 CVE-2025-21374 · GHSA-q7w5-5jr2-5xg5

Windows CSC Service Information Disclosure Vulnerability

LOW 26

Windows CSC Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00592 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-125

TI-2025-15304 CVE-2025-21336 · GHSA-r8xh-9645-25vq

Windows Cryptographic Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00672 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-203

TI-2025-15252 CVE-2025-21284 · GHSA-p2p3-g25h-5x84

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

LOW 26

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00674 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-20

TI-2025-15248 CVE-2025-21280 · GHSA-874x-xm57-9m98

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

LOW 26

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00674 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-20

TI-2025-15242 CVE-2025-21274 · GHSA-9w2r-mxjh-5657

Windows Event Tracing Denial of Service Vulnerability

LOW 26

Windows Event Tracing Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00791 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +9 CWE-59

TI-2025-15225 CVE-2025-21257 · GHSA-2qv3-h9c7-9qcq

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

LOW 26

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00733 Published 2025-01-14 Fixed in 10.0.14393.7699, 10.0.17763.6775 +7 CWE-125

TI-2025-15308 CVE-2025-21340 · GHSA-8g2m-ppjp-6hg7

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

LOW 25

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0046 Published 2025-01-14 Fixed in 10.0.17763.6775, 10.0.19044.5371 +6 CWE-284

TI-2025-15187 CVE-2025-21219 · GHSA-9wqj-2cgj-cmq7

MapUrlToZone Security Feature Bypass Vulnerability

LOW 25

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02953 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +8 CWE-41

TI-2025-15160 CVE-2025-21189 · GHSA-3gf9-c7wr-m575

MapUrlToZone Security Feature Bypass Vulnerability

LOW 25

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02908 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15236 CVE-2025-21268 · GHSA-vp5q-499v-968r

MapUrlToZone Security Feature Bypass Vulnerability

LOW 24

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01947 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15297 CVE-2025-21329 · GHSA-5w98-4m6q-799m

MapUrlToZone Security Feature Bypass Vulnerability

LOW 23

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01486 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15296 CVE-2025-21328 · GHSA-8r3x-3hj4-q58p

MapUrlToZone Security Feature Bypass Vulnerability

LOW 23

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01486 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15183 CVE-2025-21215 · GHSA-fhhj-f5rc-qp5f

Secure Boot Security Feature Bypass Vulnerability

LOW 23

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00808 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15181 CVE-2025-21213 · GHSA-5rr6-c4vv-37cw

Secure Boot Security Feature Bypass Vulnerability

LOW 22

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00724 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +10 CWE-284

TI-2025-15178 CVE-2025-21210 · GHSA-vphw-2w3h-qj8c

Windows BitLocker Information Disclosure Vulnerability

LOW 22

Windows BitLocker Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.01115 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-636

TI-2025-15182 CVE-2025-21214 · GHSA-c6m2-mj7g-44c8

Windows BitLocker Information Disclosure Vulnerability

LOW 21

Windows BitLocker Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00704 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-200

TI-2025-15280 CVE-2025-21312 · GHSA-85mq-6w92-j442

Windows Smart Card Reader Information Disclosure Vulnerability

LOW 14

Windows Smart Card Reader Information Disclosure Vulnerability

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00738 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +9 CWE-908