2025 CVE Vulnerabilities
45,362 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27737 | HIGH | 8.6 | 0.6% | Apr 8, 2025 | Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature ... |
| CVE-2025-27733 | HIGH | 7.8 | 0.6% | Apr 8, 2025 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-27732 | HIGH | 7 | 0.3% | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate pri... |
| CVE-2025-27731 | HIGH | 7.8 | 0.6% | Apr 8, 2025 | Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27730 | HIGH | 7.8 | 0.6% | Apr 8, 2025 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27729 | HIGH | 7.8 | 0.7% | Apr 8, 2025 | Use after free in Windows Shell allows an unauthorized attacker to execute code locally. |
| CVE-2025-27728 | HIGH | 7.8 | 0.5% | Apr 8, 2025 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27727 | HIGH | 7.8 | 0.9% | Apr 8, 2025 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to ele... |
| CVE-2025-27492 | HIGH | 7 | 0.3% | Apr 8, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel al... |
| CVE-2025-27491 | HIGH | 7.1 | 1.3% | Apr 8, 2025 | Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network. |
| CVE-2025-27490 | HIGH | 7.8 | 0.5% | Apr 8, 2025 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27489 | HIGH | 7.8 | 0.5% | Apr 8, 2025 | Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27487 | HIGH | 8 | 1.3% | Apr 8, 2025 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. |
| CVE-2025-27486 | HIGH | 7.5 | 1.7% | Apr 8, 2025 | Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker ... |
| CVE-2025-27485 | HIGH | 7.5 | 1.7% | Apr 8, 2025 | Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker ... |
| CVE-2025-27484 | HIGH | 7.5 | 0.7% | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an autho... |
| CVE-2025-27483 | HIGH | 7.8 | 0.7% | Apr 8, 2025 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-27482 | HIGH | 8.1 | 1.6% | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to ... |
| CVE-2025-27481 | HIGH | 8.8 | 1.1% | Apr 8, 2025 | Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-27480 | HIGH | 8.1 | 6.8% | Apr 8, 2025 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-27479 | HIGH | 7.5 | 1.8% | Apr 8, 2025 | Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
| CVE-2025-27478 | HIGH | 7 | 0.4% | Apr 8, 2025 | Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges... |
| CVE-2025-27477 | HIGH | 8.8 | 1.4% | Apr 8, 2025 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-27476 | HIGH | 7.8 | 0.6% | Apr 8, 2025 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
| CVE-2025-27475 | HIGH | 7 | 0.3% | Apr 8, 2025 | Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate priv... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now