2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59230 | HIGH | 7.8 | 2.6% | Oct 14, 2025 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges ... |
| CVE-2025-59228 | HIGH | 8.8 | 1.2% | Oct 14, 2025 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2025-59227 | HIGH | 7.8 | 0.5% | Oct 14, 2025 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2025-59226 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. |
| CVE-2025-59225 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2025-59224 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2025-59223 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2025-59222 | HIGH | 7.8 | 0.4% | Oct 14, 2025 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2025-59221 | HIGH | 7 | 0.4% | Oct 14, 2025 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2025-59213 | HIGH | 8.8 | 0.3% | Oct 14, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager ... |
| CVE-2025-59210 | HIGH | 7.4 | 0.3% | Oct 14, 2025 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
| CVE-2025-59208 | HIGH | 7.1 | 0.5% | Oct 14, 2025 | Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network. |
| CVE-2025-59207 | HIGH | 7.8 | 0.4% | Oct 14, 2025 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59206 | HIGH | 7.4 | 0.3% | Oct 14, 2025 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
| CVE-2025-59205 | HIGH | 7 | 0.2% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon... |
| CVE-2025-59202 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59201 | HIGH | 7.8 | 0.4% | Oct 14, 2025 | Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privilege... |
| CVE-2025-59200 | HIGH | 7.7 | 0.7% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Clie... |
| CVE-2025-59199 | HIGH | 7.8 | 3.9% | Oct 14, 2025 | Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locall... |
| CVE-2025-59196 | HIGH | 7 | 0.2% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allo... |
| CVE-2025-59195 | HIGH | 7 | 0.2% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon... |
| CVE-2025-59194 | HIGH | 7 | 2.4% | Oct 14, 2025 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59193 | HIGH | 7 | 0.2% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2025-59192 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59191 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now