Skip to content

CVE-2025-21xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

963 records · Page 8 of 10

CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21289: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21288: Windows COM Server Information Disclosure Vulnerability 6.5 Medium
Windows COM Server Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21287: Windows Installer Elevation of Privilege Vulnerability 7.8 High
Windows Installer Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21286: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21285: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21284: Windows Virtual Trusted Platform Module Denial of Service Vulnerability 5.5 Medium
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21283: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21282: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability 7.8 High
Microsoft COM for Windows Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21280: Windows Virtual Trusted Platform Module Denial of Service Vulnerability 5.5 Medium
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21279: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21278: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability 6.2 Medium
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21277: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21276: Windows MapUrlToZone Denial of Service Vulnerability 7.5 High
Windows MapUrlToZone Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability 7.8 High
Windows App Package Installer Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21274: Windows Event Tracing Denial of Service Vulnerability 5.5 Medium
Windows Event Tracing Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21273: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21272: Windows COM Server Information Disclosure Vulnerability 6.5 Medium
Windows COM Server Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21271: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21269: Windows HTML Platforms Security Feature Bypass Vulnerability 4.3 Medium
Windows HTML Platforms Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability 4.3 Medium
MapUrlToZone Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21267: Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.4 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Updated 2026-02-13
CVE-2025-21266: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21265: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21264: Visual Studio Code Security Feature Bypass Vulnerability 7.1 High
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Updated 2026-02-13
CVE-2025-21263: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21262: Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium
User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network
Updated 2026-06-09
CVE-2025-21261: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21260: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21259: Microsoft Outlook Spoofing Vulnerability 5.3 Medium
Microsoft Outlook Spoofing Vulnerability
Updated 2026-02-13
CVE-2025-21258: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21257: Windows WLAN AutoConfig Service Information Disclosure Vulnerability 5.5 Medium
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21256: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21255: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability 6.5 Medium
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Updated 2026-02-13
CVE-2025-21253: Microsoft Edge for IOS and Android Spoofing Vulnerability 5.3 Medium
Microsoft Edge for IOS and Android Spoofing Vulnerability
Updated 2026-02-13
CVE-2025-21252: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21251: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21250: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21249: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21247: MapUrlToZone Security Feature Bypass Vulnerability 4.3 Medium
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
Updated 2026-02-13
CVE-2025-21246: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21245: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21244: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21243: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability 5.9 Medium
Windows Kerberos Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21240: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21238: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21237: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21236: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21235: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability 7.8 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability 7.8 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21233: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21232: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21231: IP Helper Denial of Service Vulnerability 7.5 High
IP Helper Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21230: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability 7.5 High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21229: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21228: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21227: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21226: Windows Digital Media Elevation of Privilege Vulnerability 6.6 Medium
Windows Digital Media Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21225: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability 5.9 Medium
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21224: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability 8.1 High
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-06-09
CVE-2025-21222: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
Updated 2026-08-10
CVE-2025-21221: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
Updated 2026-08-10
CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability 7.5 High
Microsoft Message Queuing Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21219: MapUrlToZone Security Feature Bypass Vulnerability 4.3 Medium
MapUrlToZone Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21218: Windows Kerberos Denial of Service Vulnerability 7.5 High
Windows Kerberos Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21217: Windows NTLM Spoofing Vulnerability 6.5 Medium
Windows NTLM Spoofing Vulnerability
Updated 2026-06-09
CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability 6.5 Medium
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Updated 2026-02-13
CVE-2025-21215: Secure Boot Security Feature Bypass Vulnerability 4.6 Medium
Secure Boot Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21214: Windows BitLocker Information Disclosure Vulnerability 4.2 Medium
Windows BitLocker Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21213: Secure Boot Security Feature Bypass Vulnerability 4.6 Medium
Secure Boot Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21212: Internet Connection Sharing (ICS) Denial of Service Vulnerability 6.5 Medium
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Updated 2026-02-13
CVE-2025-21211: Secure Boot Security Feature Bypass Vulnerability 6.8 Medium
Secure Boot Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability 4.2 Medium
Windows BitLocker Information Disclosure Vulnerability
Updated 2026-06-09
CVE-2025-21208: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21207: Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability 7.5 High
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
Updated 2026-06-09
CVE-2025-21206: Visual Studio Installer Elevation of Privilege Vulnerability 7.3 High
Visual Studio Installer Elevation of Privilege Vulnerability
Updated 2026-02-13
CVE-2025-21205: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
Updated 2026-08-10
CVE-2025-21204: Windows Process Activation Elevation of Privilege Vulnerability 7.8 High
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Updated 2026-08-10
CVE-2025-21203: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability 6.5 Medium
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Updated 2026-08-10
CVE-2025-21202: Windows Recovery Environment Agent Elevation of Privilege Vulnerability 6.1 Medium
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Updated 2026-06-09
CVE-2025-21201: Windows Telephony Server Remote Code Execution Vulnerability 8.8 High
Windows Telephony Server Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21200: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21199: Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability 6.7 Medium
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.
Updated 2026-02-13
CVE-2025-21198: Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability 9.0 Critical
Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21197: Windows NTFS Information Disclosure Vulnerability 6.5 Medium
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
Updated 2026-08-10
CVE-2025-21195: Azure Service Fabric Runtime Elevation of Privilege Vulnerability 6.0 Medium
Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.
Updated 2026-02-13
CVE-2025-21194: Microsoft Surface Security Feature Bypass Vulnerability 7.1 High
Microsoft Surface Security Feature Bypass Vulnerability
Updated 2026-02-13
CVE-2025-21193: Active Directory Federation Server Spoofing Vulnerability 6.5 Medium
Active Directory Federation Server Spoofing Vulnerability
Updated 2026-06-09
CVE-2025-21191: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability 7.0 High
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
Updated 2026-08-10
CVE-2025-21190: Windows Telephony Service Remote Code Execution Vulnerability 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
Updated 2026-02-26
CVE-2025-21189: MapUrlToZone Security Feature Bypass Vulnerability 4.3 Medium
MapUrlToZone Security Feature Bypass Vulnerability
Updated 2026-06-09
CVE-2025-21188: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability 6.0 Medium
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
Updated 2026-02-26

Search a CVE ID or check dependency files →