2025 CVE Vulnerabilities

45,342 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-53145HIGH8.8Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker t...
CVE-2025-53144HIGH8.8Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker t...
CVE-2025-53143HIGH8.8Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker t...
CVE-2025-53142HIGH7Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-53141HIGH7.8Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi...
CVE-2025-53140HIGH7Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-53137HIGH7Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca...
CVE-2025-53135HIGH7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an...
CVE-2025-53134HIGH7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio...
CVE-2025-53133HIGH7.8Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-53132HIGH7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all...
CVE-2025-53131HIGH8.8Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2025-50177HIGH8.1Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2025-50176HIGH7.8Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execut...
CVE-2025-50173HIGH7.8Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-50170HIGH7.8Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authoriz...
CVE-2025-50169HIGH7.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an una...
CVE-2025-50168HIGH7.8Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to...
CVE-2025-50167HIGH7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an...
CVE-2025-50164HIGH8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute ...
CVE-2025-50163HIGH8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut...
CVE-2025-50162HIGH8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute ...
CVE-2025-50161HIGH7.3Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-50160HIGH8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute ...
CVE-2025-50159HIGH7.3Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privilege...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now