Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-24058 |
Description: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.07%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21222 |
Description: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.06%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21221 |
Description: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.06%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21205 |
Description: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.06%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21204 |
Description: Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.06%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21203 |
Description: Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS: MEDIUM (6.5) EPSS Score: 0.06%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21197 |
Description: Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
CVSS: MEDIUM (6.5) EPSS Score: 0.09%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21191 |
Description: Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.0) EPSS Score: 0.03%
April 8th, 2025 (11 days ago)
|
|
CVE-2025-21174 |
Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
CVSS: HIGH (7.5) EPSS Score: 1.59%
April 8th, 2025 (11 days ago)
|
|
🚨 Marked as known exploited on April 10th, 2025 (10 days ago).
Description: Today is Microsoft's April 2025 Patch Tuesday, which includes security updates for 134 flaws, including one actively exploited zero-day vulnerability. [...]
April 8th, 2025 (11 days ago)
|