2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55699 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-55698 | HIGH | 7.7 | 1.1% | Oct 14, 2025 | Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network. |
| CVE-2025-55697 | HIGH | 7.8 | 0.3% | Oct 14, 2025 | Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55696 | HIGH | 7 | 0.2% | Oct 14, 2025 | Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized at... |
| CVE-2025-55695 | LOW | 3.3 | 0.4% | Oct 14, 2025 | Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally. |
| CVE-2025-55694 | HIGH | 7.8 | 2.8% | Oct 14, 2025 | Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55693 | HIGH | 7 | 1.9% | Oct 14, 2025 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-55692 | HIGH | 7.8 | 3.1% | Oct 14, 2025 | Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55691 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55690 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55689 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55688 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55687 | HIGH | 7 | 0.2% | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File Sy... |
| CVE-2025-55686 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55685 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55684 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55683 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-55682 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55681 | HIGH | 7.8 | 5.1% | Oct 14, 2025 | Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55680 | HIGH | 7 | 0.4% | Oct 14, 2025 | Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacke... |
| CVE-2025-55679 | MEDIUM | 4.7 | 0.4% | Oct 14, 2025 | Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally. |
| CVE-2025-55678 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55677 | HIGH | 7.8 | 0.4% | Oct 14, 2025 | Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate priv... |
| CVE-2025-55676 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker t... |
| CVE-2025-55340 | HIGH | 7 | 0.3% | Oct 14, 2025 | Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature lo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now