2025 CVE Vulnerabilities
45,259 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49687 | HIGH | 8.8 | 0.3% | Jul 8, 2025 | Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49686 | HIGH | 7.8 | 0.4% | Jul 8, 2025 | Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49685 | HIGH | 7 | 0.3% | Jul 8, 2025 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49684 | MEDIUM | 5.5 | 0.4% | Jul 8, 2025 | Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2025-49683 | HIGH | 7.8 | 1.9% | Jul 8, 2025 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally. |
| CVE-2025-49682 | HIGH | 7.3 | 0.5% | Jul 8, 2025 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49681 | MEDIUM | 6.5 | 1.0% | Jul 8, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-49680 | HIGH | 7.3 | 0.5% | Jul 8, 2025 | Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized atta... |
| CVE-2025-49679 | HIGH | 7.8 | 0.4% | Jul 8, 2025 | Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49678 | HIGH | 7 | 0.2% | Jul 8, 2025 | Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49677 | HIGH | 7 | 0.9% | Jul 8, 2025 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49676 | HIGH | 8.8 | 0.8% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49675 | HIGH | 7.8 | 0.4% | Jul 8, 2025 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49674 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49673 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49672 | HIGH | 8.8 | 0.8% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49671 | MEDIUM | 6.5 | 1.0% | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an... |
| CVE-2025-49670 | MEDIUM | 6.5 | 0.9% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49669 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49668 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49667 | HIGH | 7.8 | 0.5% | Jul 8, 2025 | Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49666 | HIGH | 7.2 | 1.2% | Jul 8, 2025 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network. |
| CVE-2025-49665 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows a... |
| CVE-2025-49664 | MEDIUM | 5.5 | 0.5% | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authoriz... |
| CVE-2025-49663 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now