Vulnerabilities (CVE)

Total 397395 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-21208 1 Microsoft 7 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 4 more 2026-06-17 N/A 8.8 HIGH
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21207 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-06-17 N/A 7.5 HIGH
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
CVE-2025-21206 1 Microsoft 3 Visual Studio 2017, Visual Studio 2019, Visual Studio 2022 2026-06-17 N/A 7.3 HIGH
Visual Studio Installer Elevation of Privilege Vulnerability
CVE-2025-21205 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 8.8 HIGH
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVE-2025-21204 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2025-21203 1 Microsoft 7 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 4 more 2026-06-17 N/A 6.5 MEDIUM
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-21202 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 6.1 MEDIUM
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
CVE-2025-21201 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 8.8 HIGH
Windows Telephony Server Remote Code Execution Vulnerability
CVE-2025-21200 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 8.8 HIGH
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21199 1 Microsoft 1 Azure Agent 2026-06-17 N/A 6.7 MEDIUM
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-21198 1 Microsoft 2 Hpc Pack 2016, Hpc Pack 2019 2026-06-17 N/A 9.0 CRITICAL
Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
CVE-2025-21197 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 6.5 MEDIUM
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
CVE-2025-21195 1 Microsoft 1 Azure Service Fabric 2026-06-17 N/A 6.0 MEDIUM
Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.
CVE-2025-21194 1 Microsoft 54 Surface Go 2 1901, Surface Go 2 1901 Firmware, Surface Go 2 1926 and 51 more 2026-06-17 N/A 7.1 HIGH
Microsoft Surface Security Feature Bypass Vulnerability
CVE-2025-21193 1 Microsoft 5 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 2 more 2026-06-17 N/A 6.5 MEDIUM
Active Directory Federation Server Spoofing Vulnerability
CVE-2025-21191 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.0 HIGH
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVE-2025-21190 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 8.8 HIGH
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21189 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 4.3 MEDIUM
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21188 1 Microsoft 1 Azure Network Watcher 2026-06-17 N/A 6.0 MEDIUM
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVE-2025-21187 1 Microsoft 1 Power Automate For Desktop 2026-06-17 N/A 7.8 HIGH
Microsoft Power Automate Remote Code Execution Vulnerability