Total CVEs

133

Critical

17

Important

114

Exploited

1

Publicly Disclosed

0

All CVEs this month 133

CVE Title Severity CVSS Product Exploited Disclosed Diffed
CVE-2025-26663 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Critical 8.1 Windows LDAP - Lightweight Directory Access Protocol - - -
CVE-2025-26664 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26665 Windows upnphost.dll Elevation of Privilege Vulnerability Important 7 Windows upnphost.dll - - -
CVE-2025-26666 Windows Media Remote Code Execution Vulnerability Important 7.8 Windows Media - - -
CVE-2025-26669 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 8.8 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26667 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Important 7.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26681 Win32k Elevation of Privilege Vulnerability Important 6.7 Windows Win32K - GRFX - - -
CVE-2025-26680 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-26686 Windows TCP/IP Remote Code Execution Vulnerability Critical 7.5 Windows TCP/IP - - -
CVE-2025-26687 Win32k Elevation of Privilege Vulnerability Important 7.5 Windows Win32K - GRFX - - -
CVE-2025-26688 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability Important 7.8 Microsoft Virtual Hard Drive - - -
CVE-2025-27471 Microsoft Streaming Service Denial of Service Vulnerability Important 5.9 Microsoft Streaming Service - - -
CVE-2025-27470 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-27473 HTTP.sys Denial of Service Vulnerability Important 7.5 Windows HTTP.sys - - -
CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability Important 5.4 Windows Mark of the Web (MOTW) - - -
CVE-2025-27474 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-27476 Windows Digital Media Elevation of Privilege Vulnerability Important 7.8 Windows Digital Media - - -
CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability Important 7 Windows Update Stack - - -
CVE-2025-27477 Windows Telephony Service Remote Code Execution Vulnerability Important 8.8 Windows Telephony Service - - -
CVE-2025-27478 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Important 7 Windows Local Security Authority (LSA) - - -
CVE-2025-27479 Kerberos Key Distribution Proxy Service Denial of Service Vulnerability Important 7.5 Windows Kerberos - - -
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability Important 8.8 Windows Active Directory Certificate Services - - -
CVE-2025-27741 NTFS Elevation of Privilege Vulnerability Important 7.8 Windows NTFS - - -
CVE-2025-27744 Microsoft Office Elevation of Privilege Vulnerability Important 7.8 Microsoft Office - - -
CVE-2025-27742 NTFS Information Disclosure Vulnerability Important 5.5 Windows NTFS - - -
CVE-2025-27745 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 Microsoft Office - - -
CVE-2025-27746 Microsoft Office Remote Code Execution Vulnerability Important 7.8 Microsoft Office - - -
CVE-2025-27748 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 Microsoft Office - - -
CVE-2025-27747 Microsoft Word Remote Code Execution Vulnerability Important 7.8 Microsoft Office Word - - -
CVE-2025-27749 Microsoft Office Remote Code Execution Vulnerability Critical 7.8 Microsoft Office - - -
CVE-2025-27743 Microsoft System Center Elevation of Privilege Vulnerability Important 7.8 System Center - - -
CVE-2025-27751 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 Microsoft Office Excel - - -
CVE-2025-27752 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 Microsoft Office Excel - - -
CVE-2025-27750 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 Microsoft Office Excel - - -
CVE-2025-29791 Microsoft Excel Remote Code Execution Vulnerability Critical 7.8 Microsoft Office - - -
CVE-2025-29793 Microsoft SharePoint Remote Code Execution Vulnerability Important 7.2 Microsoft Office SharePoint - - -
CVE-2025-29792 Microsoft Office Elevation of Privilege Vulnerability Important 7.3 Microsoft Office - - -
CVE-2025-29796 Microsoft Edge for iOS Spoofing Vulnerability Low 4.7 Microsoft Edge for iOS - - -
CVE-2025-29794 Microsoft SharePoint Remote Code Execution Vulnerability Important 8.8 Microsoft Office SharePoint - - -
CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability Important 5.5 Dynamics Business Central - - -
CVE-2025-29820 Microsoft Word Remote Code Execution Vulnerability Important 7.8 Microsoft Office Word - - -
CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability Important 7.8 Microsoft Office OneNote - - -
CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important 7.8 Windows Common Log File System Driver Yes - -
CVE-2025-24074 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 Windows DWM Core Library - - -
CVE-2025-24073 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 Windows DWM Core Library - - -
CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability Important 5.7 Power Automate - - -
CVE-2025-21174 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-21197 Windows NTFS Information Disclosure Vulnerability Important 6.5 Windows NTFS - - -
CVE-2025-21191 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Important 7 Windows Local Security Authority (LSA) - - -
CVE-2025-21205 Windows Telephony Service Remote Code Execution Vulnerability Important 8.8 Windows Telephony Service - - -
CVE-2025-21203 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-21204 Windows Process Activation Elevation of Privilege Vulnerability Important 7.8 Windows Update Stack - - -
CVE-2025-21221 Windows Telephony Service Remote Code Execution Vulnerability Important 8.8 Windows Telephony Service - - -
CVE-2025-21222 Windows Telephony Service Remote Code Execution Vulnerability Important 8.8 Windows Telephony Service - - -
CVE-2025-24058 Windows DWM Core Library Elevation of Privilege Vulnerability Important 7.8 Windows DWM Core Library - - -
CVE-2025-25000 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 8.8 Microsoft Edge (Chromium-based) - - -
CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability Low 4.3 Microsoft Edge (Chromium-based) - - -
CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability Important 5.7 Azure Local Cluster - - -
CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability Important 5.5 Azure Local Cluster - - -
CVE-2025-26639 Windows USB Print Driver Elevation of Privilege Vulnerability Important 7.8 Windows USB Print Driver - - -
CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability Important 6.5 Windows Hello - - -
CVE-2025-26637 BitLocker Security Feature Bypass Vulnerability Important 6.8 Windows BitLocker - - -
CVE-2025-26642 Microsoft Office Remote Code Execution Vulnerability Important 7.8 Microsoft Office - - -
CVE-2025-26640 Windows Digital Media Elevation of Privilege Vulnerability Important 7 Windows Digital Media - - -
CVE-2025-26641 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Important 7.5 Windows Cryptographic Services - - -
CVE-2025-26644 Windows Hello Spoofing Vulnerability Important 5.1 Windows Hello - - -
CVE-2025-26648 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 Windows Kernel - - -
CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability Important 7 Windows Secure Channel - - -
CVE-2025-26647 Windows Kerberos Elevation of Privilege Vulnerability Important 8.8 Windows Kerberos - - -
CVE-2025-26651 Windows Local Session Manager (LSM) Denial of Service Vulnerability Important 6.5 Windows Local Session Manager (LSM) - - -
CVE-2025-26652 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-26670 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability Critical 8.1 Windows LDAP - Lightweight Directory Access Protocol - - -
CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability Important 8.1 Windows Remote Desktop Services - - -
CVE-2025-26674 Windows Media Remote Code Execution Vulnerability Important 7.8 Windows Media - - -
CVE-2025-26672 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26675 Windows Subsystem for Linux Elevation of Privilege Vulnerability Important 7.8 Windows Subsystem for Linux - - -
CVE-2025-26676 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Important 6.5 Windows Routing and Remote Access Service (RRAS) - - -
CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability Important 8.4 Windows Defender Application Control (WDAC) - - -
CVE-2025-26679 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability Important 7.8 RPC Endpoint Mapper Service - - -
CVE-2025-27467 Windows Digital Media Elevation of Privilege Vulnerability Important 7.8 Windows Digital Media - - -
CVE-2025-27469 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Important 7.5 Windows LDAP - Lightweight Directory Access Protocol - - -
CVE-2025-27485 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-27484 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Important 7.5 Windows Universal Plug and Play (UPnP) Device Host - - -
CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability Critical 8.1 Remote Desktop Gateway Service - - -
CVE-2025-27481 Windows Telephony Service Remote Code Execution Vulnerability Important 8.8 Windows Telephony Service - - -
CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability Critical 8.1 Remote Desktop Gateway Service - - -
CVE-2025-27483 NTFS Elevation of Privilege Vulnerability Important 7.8 Windows NTFS - - -
CVE-2025-27487 Remote Desktop Client Remote Code Execution Vulnerability Important 8 Remote Desktop Client - - -
CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability Important 7.8 Azure Local - - -
CVE-2025-27486 Windows Standards-Based Storage Management Service Denial of Service Vulnerability Important 7.5 Windows Standards-Based Storage Management Service - - -
CVE-2025-27492 Windows Secure Channel Elevation of Privilege Vulnerability Important 7 Windows Secure Channel - - -
CVE-2025-27491 Windows Hyper-V Remote Code Execution Vulnerability Critical 7.1 Windows Hyper-V - - -
CVE-2025-27490 Windows Bluetooth Service Elevation of Privilege Vulnerability Important 7.8 Windows Bluetooth Service - - -
CVE-2025-27727 Windows Installer Elevation of Privilege Vulnerability Important 7.8 Windows Installer - - Yes
CVE-2025-27729 Windows Shell Remote Code Execution Vulnerability Important 7.8 Windows Shell - - -
CVE-2025-27728 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Important 7.8 Windows Kernel-Mode Drivers - - -
CVE-2025-27731 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Important 7.8 OpenSSH for Windows - - -
CVE-2025-27730 Windows Digital Media Elevation of Privilege Vulnerability Important 7.8 Windows Digital Media - - -
CVE-2025-27732 Windows Graphics Component Elevation of Privilege Vulnerability Important 7 Windows Win32K - GRFX - - -
CVE-2025-27733 NTFS Elevation of Privilege Vulnerability Important 7.8 Windows NTFS - - -
CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability Important 6 Windows Virtualization-Based Security (VBS) Enclave - - -
CVE-2025-27736 Windows Power Dependency Coordinator Information Disclosure Vulnerability Important 5.5 Windows Power Dependency Coordinator - - -
CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability Important 8.6 Windows Security Zone Mapping - - -
CVE-2025-27738 Windows Resilient File System (ReFS) Information Disclosure Vulnerability Important 6.5 Windows Resilient File System (ReFS) - - -
CVE-2025-27739 Windows Kernel Elevation of Privilege Vulnerability Important 7.8 Windows Kernel - - -
CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability Important 7.3 Visual Studio Tools for Applications and SQL Server Management Studio - - -
CVE-2025-29800 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability Important 7.8 Microsoft AutoUpdate (MAU) - - -
CVE-2025-29802 Visual Studio Elevation of Privilege Vulnerability Important 7.3 Visual Studio - - -
CVE-2025-29801 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability Important 7.8 Microsoft AutoUpdate (MAU) - - -
CVE-2025-29804 Visual Studio Elevation of Privilege Vulnerability Important 7.3 Visual Studio - - -
CVE-2025-29809 Windows Kerberos Security Feature Bypass Vulnerability Important 7.1 Windows Kerberos - - -
CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability Important 5.5 Windows Cryptographic Services - - -
CVE-2025-29805 Outlook for Android Information Disclosure Vulnerability Important 7.5 Outlook for Android - - -
CVE-2025-29810 Active Directory Domain Services Elevation of Privilege Vulnerability Important 7.5 Active Directory Domain Services - - -
CVE-2025-29812 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important 7.8 Windows Kernel Memory - - -
CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability Important 7.5 Microsoft Office Word - - -
CVE-2025-29815 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.6 Microsoft Edge (Chromium-based) - - -
CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability Important 6.2 Azure Portal Windows Admin Center - - -
CVE-2025-29811 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Important 7.8 Windows Mobile Broadband - - -
CVE-2025-32726 Visual Studio Code Elevation of Privilege Vulnerability Important 6.8 Visual Studio Code - - -
CVE-2025-24060 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 Windows DWM Core Library - - -
CVE-2025-24062 Microsoft DWM Core Library Elevation of Privilege Vulnerability Important 7.8 Windows DWM Core Library - - -
CVE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability Important 7.5 ASP.NET Core - - -
CVE-2025-29834 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Important 7.5 Microsoft Edge (Chromium-based) - - -
CVE-2025-30391 Microsoft Dynamics Information Disclosure Vulnerability Critical 7.5 Microsoft Dynamics - - -
CVE-2025-30389 Azure Bot Framework SDK Elevation of Privilege Vulnerability Critical 9.8 Azure Bot Framework SDK - - -
CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability Critical 8.8 Microsoft Azure Functions - - -
CVE-2025-30390 Azure ML Compute Elevation of Privilege Vulnerability Critical 8.8 Azure - - -
CVE-2025-30392 Azure AI bot Elevation of Privilege Vulnerability Critical 9.8 Azure Bot Framework SDK - - -
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability Critical 8.8 Azure Virtual Desktop - - -
CVE-2025-26673 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Important 7.5 Windows LDAP - Lightweight Directory Access Protocol - - -
CVE-2025-29823 Microsoft Excel Remote Code Execution Vulnerability Important 7.8 Microsoft Office Excel - - -

Threat Categories 6

Threat Category CVEs Critical
Elevation of Privilege 53 4
Remote Code Execution 35 12
Information Disclosure 19 1
Denial of Service 14 -
Security Feature Bypass 9 -
Spoofing 3 -

Affected Products 71

Product CVEs Exploited
Microsoft Office 8 -
Windows Routing and Remote Access Service (RRAS) 8 -
Windows Standards-Based Storage Management Service 6 -
Windows DWM Core Library 5 -
Windows NTFS 5 -
Windows Telephony Service 5 -
Microsoft Edge (Chromium-based) 4 -
Microsoft Office Excel 4 -
Windows Digital Media 4 -
Windows LDAP - Lightweight Directory Access Protocol 4 -
Microsoft Office Word 3 -
Windows Kerberos 3 -
Windows Win32K - GRFX 3 -
Azure Bot Framework SDK 2 -
Azure Local Cluster 2 -
Microsoft AutoUpdate (MAU) 2 -
Microsoft Office SharePoint 2 -
Remote Desktop Gateway Service 2 -
Visual Studio 2 -
Windows Cryptographic Services 2 -
Windows Hello 2 -
Windows Kernel 2 -
Windows Local Security Authority (LSA) 2 -
Windows Media 2 -
Windows Secure Channel 2 -
Windows Update Stack 2 -
ASP.NET Core 1 -
Active Directory Domain Services 1 -
Azure 1 -
Azure Local 1 -
Azure Portal Windows Admin Center 1 -
Azure Virtual Desktop 1 -
Dynamics Business Central 1 -
Microsoft Azure Functions 1 -
Microsoft Dynamics 1 -
Microsoft Edge for iOS 1 -
Microsoft Office OneNote 1 -
Microsoft Streaming Service 1 -
Microsoft Virtual Hard Drive 1 -
OpenSSH for Windows 1 -
Outlook for Android 1 -
Power Automate 1 -
RPC Endpoint Mapper Service 1 -
Remote Desktop Client 1 -
System Center 1 -
Visual Studio Code 1 -
Visual Studio Tools for Applications and SQL Server Management Studio 1 -
Windows Active Directory Certificate Services 1 -
Windows BitLocker 1 -
Windows Bluetooth Service 1 -
Windows Common Log File System Driver 1 1
Windows Defender Application Control (WDAC) 1 -
Windows HTTP.sys 1 -
Windows Hyper-V 1 -
Windows Installer 1 -
Windows Kernel Memory 1 -
Windows Kernel-Mode Drivers 1 -
Windows Local Session Manager (LSM) 1 -
Windows Mark of the Web (MOTW) 1 -
Windows Mobile Broadband 1 -
Windows Power Dependency Coordinator 1 -
Windows Remote Desktop Services 1 -
Windows Resilient File System (ReFS) 1 -
Windows Security Zone Mapping 1 -
Windows Shell 1 -
Windows Subsystem for Linux 1 -
Windows TCP/IP 1 -
Windows USB Print Driver 1 -
Windows Universal Plug and Play (UPnP) Device Host 1 -
Windows Virtualization-Based Security (VBS) Enclave 1 -
Windows upnphost.dll 1 -