Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-24056 |
Description: Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.17%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24055 |
Description: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
CVSS: MEDIUM (4.3) EPSS Score: 0.05%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24054 |
🚨 Marked as known exploited on April 17th, 2025 (3 days ago).
Description: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVSS: MEDIUM (6.5) EPSS Score: 0.12%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24051 |
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.18%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24050 |
Description: Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.05%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24049 |
Description: Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
CVSS: HIGH (8.4) EPSS Score: 0.07%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24048 |
Description: Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.05%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24046 |
Description: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.05%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24045 |
Description: Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.1) EPSS Score: 0.2%
March 11th, 2025 (about 1 month ago)
|
|
CVE-2025-24044 |
Description: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.05%
March 11th, 2025 (about 1 month ago)
|