2025 CVE Vulnerabilities
45,153 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54114 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices... |
| CVE-2025-54113 | HIGH | 8.8 | 0.8% | Sep 9, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-54112 | HIGH | 7 | 0.4% | Sep 9, 2025 | Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54111 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54110 | HIGH | 8.8 | 3.8% | Sep 9, 2025 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54108 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem... |
| CVE-2025-54106 | HIGH | 8.8 | 1.3% | Sep 9, 2025 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to ex... |
| CVE-2025-54105 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File ... |
| CVE-2025-54103 | HIGH | 7.4 | 0.4% | Sep 9, 2025 | Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-54102 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally... |
| CVE-2025-54099 | HIGH | 7 | 0.4% | Sep 9, 2025 | Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate pr... |
| CVE-2025-54098 | HIGH | 7.8 | 2.6% | Sep 9, 2025 | Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54093 | HIGH | 7 | 0.3% | Sep 9, 2025 | Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges ... |
| CVE-2025-54092 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an... |
| CVE-2025-54091 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2025-53807 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon... |
| CVE-2025-53805 | HIGH | 7.5 | 1.3% | Sep 9, 2025 | Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a netwo... |
| CVE-2025-53802 | HIGH | 7 | 0.4% | Sep 9, 2025 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2025-53801 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-53800 | HIGH | 7.8 | 0.5% | Sep 9, 2025 | No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2025-53303 | HIGH | 8.8 | 0.3% | Sep 9, 2025 | Deserialization of Untrusted Data vulnerability in ThemeMove ThemeMove Core thememove-core allows Object Injection.This ... |
| CVE-2025-49734 | HIGH | 7 | 0.3% | Sep 9, 2025 | Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker ... |
| CVE-2025-49692 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges local... |
| CVE-2025-49430 | HIGH | 7.2 | 0.2% | Sep 9, 2025 | Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request For... |
| CVE-2025-48101 | HIGH | 8.8 | 0.3% | Sep 9, 2025 | Deserialization of Untrusted Data vulnerability in webdevstudios Constant Contact for WordPress allows Object Injection.... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now