Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2023-39494

PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to expl...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
6.5

MEDIUM

CVE-2025-29959

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Information Disclosure
5.5

MEDIUM

CVE-2023-39495

PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is requir...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
6.5

MEDIUM

CVE-2025-29960

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Information Disclosure
6.5

MEDIUM

CVE-2025-29961

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Information Disclosure
8.8

HIGH

CVE-2025-29962

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29963

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29964

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29966

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29967

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2025-29969

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Race Condition
7.8

HIGH

CVE-2025-29970

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2023-39496

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this ...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
7.5

HIGH

CVE-2025-29971

Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network....

Affected Products : windows_11_22h2 windows_11_23h2 windows_11_24h2
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Denial of Service
7.0

HIGH

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally....

Affected Products : azure_file_sync
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2023-39497

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
5.7

MEDIUM

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-29975

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally....

Affected Products : pc_manager
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-29978

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally....

Affected Products : 365_apps office_long_term_servicing_channel office_2024
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption

Showing 20 of 292802 Results

1
...
1221
1222
1223
1224
1225
1226
1227
...
14641

Browse by Apps

Latest CVE Feed

7.8

6.5

5.5

6.5

6.5

8.8

8.8

8.8

8.8

8.8

6.5

7.5

7.8

7.8

7.5

7.0

7.8

5.7

7.8

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable