CVE-2025-21xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
963 records · Page 7 of 10
Microsoft Office Remote Code Execution Vulnerability
UpdatedWindows Storage Elevation of Privilege Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
Updated- CVE-2025-21389: Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability 7.5 High
Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
Updated Microsoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedA Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.
UpdatedAn authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
UpdatedMicrosoft Excel Information Disclosure Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedImproper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.
UpdatedDHCP Client Service Remote Code Execution Vulnerability
UpdatedWindows CSC Service Elevation of Privilege Vulnerability
UpdatedNTLM Hash Disclosure Spoofing Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Updated- CVE-2025-21375: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability 7.8 High
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Updated Windows CSC Service Information Disclosure Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedMicrosoft Brokering File System Elevation of Privilege Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
UpdatedMicrosoft Digest Authentication Remote Code Execution Vulnerability
UpdatedMicrosoft Digest Authentication Remote Code Execution Vulnerability
UpdatedWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
UpdatedMicrosoft Access Remote Code Execution Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Security Feature Bypass Vulnerability
UpdatedMicrosoft Word Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
UpdatedWindows Kernel Security Feature Bypass Vulnerability
UpdatedWindows Core Messaging Elevation of Privileges Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft Office Visio Remote Code Execution Vulnerability
UpdatedMissing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedInternet Connection Sharing (ICS) Denial of Service Vulnerability
Updated- CVE-2025-21351: Windows Active Directory Domain Services API Denial of Service Vulnerability 7.5 High
Windows Active Directory Domain Services API Denial of Service Vulnerability
Updated Windows Kerberos Denial of Service Vulnerability
UpdatedWindows Remote Desktop Configuration Service Tampering Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedWindows Deployment Services Denial of Service Vulnerability
UpdatedMicrosoft Office Security Feature Bypass Vulnerability
UpdatedMicrosoft Office Visio Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Updated- CVE-2025-21343: Windows Web Threat Defense User Service Information Disclosure Vulnerability 7.5 High
Windows Web Threat Defense User Service Information Disclosure Vulnerability
Updated Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedWindows Digital Media Elevation of Privilege Vulnerability
Updated- CVE-2025-21340: Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability 5.5 Medium
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Updated Windows Telephony Service Remote Code Execution Vulnerability
UpdatedGDI+ Remote Code Execution Vulnerability
UpdatedWindows NTFS Elevation of Privilege Vulnerability
UpdatedWindows Cryptographic Information Disclosure Vulnerability
Updated- CVE-2025-21335: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Updated - CVE-2025-21334: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Updated - CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Updated MapUrlToZone Security Feature Bypass Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedWindows Remote Desktop Services Denial of Service Vulnerability
UpdatedMapUrlToZone Security Feature Bypass Vulnerability
UpdatedMapUrlToZone Security Feature Bypass Vulnerability
UpdatedWindows Digital Media Elevation of Privilege Vulnerability
UpdatedInternet Explorer Remote Code Execution Vulnerability
UpdatedWindows Secure Kernel Mode Elevation of Privilege Vulnerability
UpdatedWindows Digital Media Elevation of Privilege Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedMicrosoft PC Manager Elevation of Privilege Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedMicrosoft Brokering File System Elevation of Privilege Vulnerability
UpdatedWindows SmartScreen Spoofing Vulnerability
UpdatedWindows Security Account Manager (SAM) Denial of Service Vulnerability
UpdatedWindows Smart Card Reader Information Disclosure Vulnerability
UpdatedWindows NTLM V1 Elevation of Privilege Vulnerability
UpdatedWindows Digital Media Elevation of Privilege Vulnerability
UpdatedWindows Remote Desktop Services Remote Code Execution Vulnerability
UpdatedWindows Themes Spoofing Vulnerability
Updated- CVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability 9.8 Critical
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Updated Windows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedMicrosoft DWM Core Library Elevation of Privilege Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Geolocation Service Information Disclosure Vulnerability
Updated- CVE-2025-21300: Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability 7.5 High
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Updated Windows Kerberos Security Feature Bypass Vulnerability
UpdatedWindows OLE Remote Code Execution Vulnerability
UpdatedWindows Remote Desktop Services Remote Code Execution Vulnerability
UpdatedBranchCache Remote Code Execution Vulnerability
UpdatedSPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
UpdatedMicrosoft Digest Authentication Remote Code Execution Vulnerability
UpdatedActive Directory Domain Services Elevation of Privilege Vulnerability
UpdatedWindows Search Service Elevation of Privilege Vulnerability
UpdatedWindows Direct Show Remote Code Execution Vulnerability
Updated