Vulnerabilidades do Microsoft Windows 11 version 22H3

CVE-2025-53139 Alta · 7.1 CWE-319 14/10/2025

Windows Hello Security Feature Bypass Vulnerability

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-50175 Alta · 7.8 CWE-416 14/10/2025

Windows Digital Media Elevation of Privilege Vulnerability

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVE-2025-50152 Alta · 7.8 CWE-125 14/10/2025

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2025-49708 Crítica · 9.9 CWE-416 14/10/2025

Microsoft Graphics Component Elevation of Privilege Vulnerability

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

CVE-2025-48813 Média · 4.7 CWE-324 14/10/2025

Virtual Secure Mode Spoofing Vulnerability

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.

CVE-2025-48004 Alta · 7.0 CWE-416 14/10/2025

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

CVE-2025-25004 Alta · 7.3 CWE-284 14/10/2025

PowerShell Elevation of Privilege Vulnerability

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVE-2025-33073 Alta · 8.8 KEV Urgente · 70 Exploit público CWE-284 10/06/2025

Microsoft Windows SMB Client Improper Access Control Vulnerability

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2025-33053 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-73 10/06/2025

Microsoft Windows External Control of File Name or Path Vulnerability

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2025-32709 Alta · 7.8 KEV Alta · 59 Exploit público CWE-416 13/05/2025

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-32706 Alta · 7.8 KEV Alta · 53 CWE-20 13/05/2025

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-30400 Alta · 7.8 KEV Alta · 59 Exploit público CWE-416 13/05/2025

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2025-32701 Alta · 7.8 KEV Alta · 52 CWE-416 13/05/2025

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-30397 Alta · 7.5 KEV Urgente · 70 Exploit público CWE-843 13/05/2025

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

CVE-2025-29824 Alta · 7.8 KEV Urgente · 71 Exploit público Ransomware CWE-416 08/04/2025

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2025-26633 Alta · 7.0 KEV Urgente · 80 Exploit público Ransomware CWE-707 11/03/2025

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-24991 Média · 5.5 KEV Alta · 50 CWE-125 11/03/2025

Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2025-24993 Alta · 7.8 KEV Alta · 53 CWE-122 11/03/2025

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2025-24984 Média · 4.6 KEV Alta · 50 CWE-532 11/03/2025

Microsoft Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-24985 Alta · 7.8 KEV Alta · 61 Exploit público CWE-122 11/03/2025

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2025-24054 Média · 5.4 KEV Alta · 67 Exploit público CWE-73 11/03/2025

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-21418 Alta · 7.8 KEV Alta · 52 CWE-122 11/02/2025

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-21391 Alta · 7.1 KEV Alta · 53 CWE-59 11/02/2025

Microsoft Windows Storage Link Following Vulnerability

Windows Storage Elevation of Privilege Vulnerability

CVE-2025-21333 Alta · 7.8 KEV Alta · 69 Exploit público CWE-122 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVE-2025-21334 Alta · 7.8 KEV Alta · 52 CWE-416 14/01/2025

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability