Search

Search Results (315539 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-55695 1 Microsoft 10 Windows, Windows 10, Windows 11 and 7 more 2025-10-24 5.5 Medium
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
CVE-2025-55694 1 Microsoft 5 Windows, Windows 11, Windows Server and 2 more 2025-10-24 7.8 High
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2025-55693 1 Microsoft 4 Windows, Windows 11, Windows Server and 1 more 2025-10-24 7.4 High
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
CVE-2025-55692 1 Microsoft 9 Windows, Windows 10, Windows 11 and 6 more 2025-10-24 7.8 High
Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2025-10585 4 Apple, Google, Linux and 1 more 5 Macos, Chrome, V8 and 2 more 2025-10-24 9.8 Critical
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-55691 1 Microsoft 4 Windows, Windows 11, Windows Server and 1 more 2025-10-24 7 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-55690 1 Microsoft 4 Windows, Windows 11, Windows Server and 1 more 2025-10-24 7 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-55688 1 Microsoft 4 Windows, Windows 11, Windows Server and 1 more 2025-10-24 7 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-55684 1 Microsoft 4 Windows, Windows 11, Windows Server and 1 more 2025-10-24 7 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-2783 2 Google, Microsoft 2 Chrome, Windows 2025-10-24 8.3 High
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2025-55683 1 Microsoft 6 Windows, Windows Server, Windows Server 2016 and 3 more 2025-10-24 5.5 Medium
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-55337 2025-10-24 6.1 Medium
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-55334 2025-10-24 6.2 Medium
Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-5419 2 Google, Microsoft 2 Chrome, Edge Chromium 2025-10-24 8.8 High
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-55332 2025-10-24 6.1 Medium
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-55331 2025-10-24 7 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-55330 1 Microsoft 6 Bitlocker, Windows, Windows 11 and 3 more 2025-10-24 6.1 Medium
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-55328 2025-10-24 7.8 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-55326 2025-10-24 7.5 High
Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network.
CVE-2025-55248 4 Apple, Linux, Microsoft and 1 more 21 Macos, Linux Kernel, .net and 18 more 2025-10-24 4.8 Medium
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.