LiveActive security incident?Get immediate response

CVE archive

January 2025

Browse CVE records published in January 2025, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 3893 matching CVEs · Page 6 of 78.

Medium · CVSS 5.5

CVE-2025-21319: Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.5

CVE-2025-21318: Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.5

CVE-2025-21316: Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.8

CVE-2025-21315: Microsoft Brokering File System Elevation of Privilege Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.5

CVE-2025-21314: Windows SmartScreen Spoofing Vulnerability

Windows SmartScreen Spoofing Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.1

CVE-2025-21309: Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21306: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.8

CVE-2025-21304: Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21303: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21302: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.5

CVE-2025-21301: Windows Geolocation Service Information Disclosure Vulnerability

Windows Geolocation Service Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.1

CVE-2025-21299: Windows Kerberos Security Feature Bypass Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Critical · CVSS 9.8

CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.1

CVE-2025-21297: Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21296: BranchCache Remote Code Execution Vulnerability

BranchCache Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.1

CVE-2025-21295: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.1

CVE-2025-21294: Microsoft Digest Authentication Remote Code Execution Vulnerability

Microsoft Digest Authentication Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21293: Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21291: Windows Direct Show Remote Code Execution Vulnerability

Windows Direct Show Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21289: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.5

CVE-2025-21288: Windows COM Server Information Disclosure Vulnerability

Windows COM Server Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21285: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.5

CVE-2025-21284: Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21282: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.8

CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability

Microsoft COM for Windows Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.5

CVE-2025-21280: Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21277: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.5

CVE-2025-21272: Windows COM Server Information Disclosure Vulnerability

Windows COM Server Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.8

CVE-2025-21271: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 4.3

CVE-2025-21269: Windows HTML Platforms Security Feature Bypass Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 4.3

CVE-2025-21268: MapUrlToZone Security Feature Bypass Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21266: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21265: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21263: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21260: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21258: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.5

CVE-2025-21257: Windows WLAN AutoConfig Service Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21255: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21252: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 7.5

CVE-2025-21251: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 6.6

CVE-2025-21249: Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21244: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21243: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

Medium · CVSS 5.9

CVE-2025-21242: Windows Kerberos Information Disclosure Vulnerability

Windows Kerberos Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026

High · CVSS 8.8

CVE-2025-21237: Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Published Jan 14, 2025 · Updated Jun 9, 2026