deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13170
Published: 2025-01-14
Description: An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2024-13171
Published: 2025-01-14
Description: Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2024-13172
Published: 2025-01-14
Description: Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2024-53996
Published: 2025-01-14
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2024. Notes: none.
CVE: CVE-2025-0465
Published: 2025-01-14
Description: A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/categories. The manipulation of the argument PostBody.populate leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-502
References: https://gist.github.com/PSDat123/ad7eb46550f22632aa4c229a0857f00d; https://vuldb.com/?ctiid.291482; https://vuldb.com/?id.291482
CVE: CVE-2025-21171
Published: 2025-01-14
Description: .NET Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
CVE: CVE-2025-21172
Published: 2025-01-14
Description: .NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21172; https://www.herodevs.com/vulnerability-directory/cve-2025-21172
CVE: CVE-2025-21173
Published: 2025-01-14
Description: .NET Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-379
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173; https://www.herodevs.com/vulnerability-directory/cve-2025-21173
CVE: CVE-2025-21176
Published: 2025-01-14
Description: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176; https://www.herodevs.com/vulnerability-directory/cve-2025-21176
CVE: CVE-2025-21178
Published: 2025-01-14
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21178
CVE: CVE-2025-21186
Published: 2025-01-14
Description: Microsoft Access Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21186
CVE: CVE-2025-21187
Published: 2025-01-14
Description: Microsoft Power Automate Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21187
CVE: CVE-2025-21189
Published: 2025-01-14
Description: MapUrlToZone Security Feature Bypass Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21189
CVE: CVE-2025-21193
Published: 2025-01-14
Description: Active Directory Federation Server Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21193
CVE: CVE-2025-21202
Published: 2025-01-14
Description: Windows Recovery Environment Agent Elevation of Privilege Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21202
CVE: CVE-2025-21207
Published: 2025-01-14
Description: Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21207
CVE: CVE-2025-21210
Published: 2025-01-14
Description: Windows BitLocker Information Disclosure Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-636
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21210
CVE: CVE-2025-21211
Published: 2025-01-14
Description: Secure Boot Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21211
CVE: CVE-2025-21213
Published: 2025-01-14
Description: Secure Boot Security Feature Bypass Vulnerability
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21213
CVE: CVE-2025-21214
Published: 2025-01-14
Description: Windows BitLocker Information Disclosure Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21214
CVE: CVE-2025-21215
Published: 2025-01-14
Description: Secure Boot Security Feature Bypass Vulnerability
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21215
CVE: CVE-2025-21217
Published: 2025-01-14
Description: Windows NTLM Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21217
CVE: CVE-2025-21218
Published: 2025-01-14
Description: Windows Kerberos Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21218
CVE: CVE-2025-21219
Published: 2025-01-14
Description: MapUrlToZone Security Feature Bypass Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21219
CVE: CVE-2025-21220
Published: 2025-01-14
Description: Microsoft Message Queuing Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21220
CVE: CVE-2025-21223
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21223
CVE: CVE-2025-21224
Published: 2025-01-14
Description: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416, CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21224; https://www.vicarius.io/vsociety/posts/cve-2025-21224-remote-code-execution-vulnerability-in-windows-line-printer-daemon-service-detection-script; https://www.vicarius.io/vsociety/posts/cve-2025-21224-remote-code-execution-vulnerability-in-windows-line-printer-daemon-service-mitigation-script
CVE: CVE-2025-21225
Published: 2025-01-14
Description: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21225
CVE: CVE-2025-21226
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21226
CVE: CVE-2025-21227
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21227
CVE: CVE-2025-21228
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21228
CVE: CVE-2025-21229
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21229
CVE: CVE-2025-21230
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21230
CVE: CVE-2025-21231
Published: 2025-01-14
Description: IP Helper Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21231
CVE: CVE-2025-21232
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21232
CVE: CVE-2025-21233
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21233
CVE: CVE-2025-21234
Published: 2025-01-14
Description: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21234
CVE: CVE-2025-21235
Published: 2025-01-14
Description: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21235
CVE: CVE-2025-21236
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21236
CVE: CVE-2025-21237
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21237
CVE: CVE-2025-21238
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21238
CVE: CVE-2025-21239
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21239
CVE: CVE-2025-21240
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21240
CVE: CVE-2025-21241
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21241
CVE: CVE-2025-21242
Published: 2025-01-14
Description: Windows Kerberos Information Disclosure Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21242
CVE: CVE-2025-21243
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21243
CVE: CVE-2025-21244
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21244
CVE: CVE-2025-21245
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21245
CVE: CVE-2025-21246
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21246
CVE: CVE-2025-21248
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21248
CVE: CVE-2025-21249
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21249
CVE: CVE-2025-21250
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21250
CVE: CVE-2025-21251
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21251
CVE: CVE-2025-21252
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21252
CVE: CVE-2025-21255
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21255
CVE: CVE-2025-21256
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21256
CVE: CVE-2025-21257
Published: 2025-01-14
Description: Windows WLAN AutoConfig Service Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21257
CVE: CVE-2025-21258
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21258
CVE: CVE-2025-21260
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21260
CVE: CVE-2025-21261
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21261
CVE: CVE-2025-21263
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21263
CVE: CVE-2025-21265
Published: 2025-01-14
Description: Windows Digital Media Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21265
CVE: CVE-2025-21266
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21266
CVE: CVE-2025-21268
Published: 2025-01-14
Description: MapUrlToZone Security Feature Bypass Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21268
CVE: CVE-2025-21269
Published: 2025-01-14
Description: Windows HTML Platforms Security Feature Bypass Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21269
CVE: CVE-2025-21270
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21270
CVE: CVE-2025-21271
Published: 2025-01-14
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21271
CVE: CVE-2025-21272
Published: 2025-01-14
Description: Windows COM Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21272
CVE: CVE-2025-21273
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21273
CVE: CVE-2025-21274
Published: 2025-01-14
Description: Windows Event Tracing Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21274
CVE: CVE-2025-21275
Published: 2025-01-14
Description: Windows App Package Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21275
CVE: CVE-2025-21276
Published: 2025-01-14
Description: Windows MapUrlToZone Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-191, CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21276
CVE: CVE-2025-21277
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21277
CVE: CVE-2025-21278
Published: 2025-01-14
Description: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21278
CVE: CVE-2025-21280
Published: 2025-01-14
Description: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21280
CVE: CVE-2025-21281
Published: 2025-01-14
Description: Microsoft COM for Windows Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21281
CVE: CVE-2025-21282
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21282
CVE: CVE-2025-21284
Published: 2025-01-14
Description: Windows Virtual Trusted Platform Module Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21284
CVE: CVE-2025-21285
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21285
CVE: CVE-2025-21286
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21286
CVE: CVE-2025-21287
Published: 2025-01-14
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21287
CVE: CVE-2025-21288
Published: 2025-01-14
Description: Windows COM Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21288
CVE: CVE-2025-21289
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21289
CVE: CVE-2025-21290
Published: 2025-01-14
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21290
CVE: CVE-2025-21291
Published: 2025-01-14
Description: Windows Direct Show Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21291
CVE: CVE-2025-21292
Published: 2025-01-14
Description: Windows Search Service Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21292
CVE: CVE-2025-21293
Published: 2025-01-14
Description: Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21293
CVE: CVE-2025-21294
Published: 2025-01-14
Description: Microsoft Digest Authentication Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21294
CVE: CVE-2025-21295
Published: 2025-01-14
Description: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21295
CVE: CVE-2025-21296
Published: 2025-01-14
Description: BranchCache Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21296
CVE: CVE-2025-21297
Published: 2025-01-14
Description: Windows Remote Desktop Services Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21297
CVE: CVE-2025-21298
Published: 2025-01-14
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298
CVE: CVE-2025-21299
Published: 2025-01-14
Description: Windows Kerberos Security Feature Bypass Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-922
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21299
CVE: CVE-2025-21300
Published: 2025-01-14
Description: Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21300
CVE: CVE-2025-21301
Published: 2025-01-14
Description: Windows Geolocation Service Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21301
CVE: CVE-2025-21302
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21302
CVE: CVE-2025-21303
Published: 2025-01-14
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21303