Vulnerabilities (CVE)

Filtered by CWE-416
Total 7342 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-59222 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59221 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2026-06-17 N/A 7.0 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59220 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 22h2 and 5 more 2026-06-17 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59216 1 Microsoft 2 Windows 11 24h2, Windows Server 2025 2026-06-17 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-59215 1 Microsoft 2 Windows 11 24h2, Windows Server 2025 2026-06-17 N/A 7.0 HIGH
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-59210 1 Microsoft 3 Windows 11 24h2, Windows 11 25h2, Windows Server 2025 2026-06-17 N/A 7.4 HIGH
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-59206 1 Microsoft 3 Windows 11 24h2, Windows 11 25h2, Windows Server 2025 2026-06-17 N/A 7.4 HIGH
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-59202 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-06-17 N/A 7.0 HIGH
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2025-59196 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59195 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-06-17 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
CVE-2025-59189 1 Microsoft 3 Windows 11 24h2, Windows 11 25h2, Windows Server 2025 2026-06-17 N/A 7.4 HIGH
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
CVE-2025-58738 1 Microsoft 12 Windows 10 1507, Windows 10 1809, Windows 10 21h2 and 9 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58737 1 Microsoft 6 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 3 more 2026-06-17 N/A 7.0 HIGH
Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.
CVE-2025-58736 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58735 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58734 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58733 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58732 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58731 1 Microsoft 7 Windows 11 22h2, Windows 11 23h2, Windows 11 24h2 and 4 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVE-2025-58730 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.0 HIGH
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.