7.8
CVSS
Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
📦
windows_server_2008
Vendor: microsoft
Actively Exploited
141
CISA KEV List
PoC / Exploits
454
Code Available
Total RCEs
810
Remote Access
Total CVEs
16698
Total Indexed
Avg. EPSS
8.39%
Exploit Prob.
Security Vulnerability Index
Page 21 / 1670
7.0
CVSS
Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
Severity: HIGH
8.8
CVSS
CVE-2025-33073
Exploit Found
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
Severity: HIGH
8.1
CVSS
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.
Severity: HIGH
8.8
CVSS
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
Severity: HIGH
8.8
CVSS
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Severity: HIGH