2025 CVE Vulnerabilities
45,150 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59190 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally. |
| CVE-2025-59188 | MEDIUM | 5.5 | 0.4% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to ... |
| CVE-2025-59186 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-59185 | MEDIUM | 6.5 | 1.0% | Oct 14, 2025 | External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a n... |
| CVE-2025-59184 | MEDIUM | 5.5 | 0.4% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized at... |
| CVE-2025-58739 | MEDIUM | 6.5 | 0.7% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p... |
| CVE-2025-58729 | MEDIUM | 6.5 | 1.0% | Oct 14, 2025 | Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to d... |
| CVE-2025-58719 | MEDIUM | 4.7 | 0.4% | Oct 14, 2025 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locall... |
| CVE-2025-58717 | MEDIUM | 4.3 | 0.9% | Oct 14, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-55700 | MEDIUM | 4.3 | 0.9% | Oct 14, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-55699 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-55683 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-55682 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55679 | MEDIUM | 4.7 | 0.4% | Oct 14, 2025 | Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally. |
| CVE-2025-55676 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker t... |
| CVE-2025-55338 | MEDIUM | 4.6 | 2.9% | Oct 14, 2025 | Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with... |
| CVE-2025-55337 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55336 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorize... |
| CVE-2025-55334 | MEDIUM | 5.5 | 0.3% | Oct 14, 2025 | Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security featur... |
| CVE-2025-55333 | MEDIUM | 4.6 | 0.8% | Oct 14, 2025 | Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security fea... |
| CVE-2025-55332 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55330 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55325 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
| CVE-2025-55320 | MEDIUM | 6.8 | 0.6% | Oct 14, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager ... |
| CVE-2025-55248 | MEDIUM | 5.7 | 0.7% | Oct 14, 2025 | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose informat... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now