7.8
CVSS
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Severity: HIGH
📦
windows_server_2008
Vendor: microsoft
Actively Exploited
141
CISA KEV List
PoC / Exploits
454
Code Available
Total RCEs
810
Remote Access
Total CVEs
16698
Total Indexed
Avg. EPSS
8.39%
Exploit Prob.
Security Vulnerability Index
Page 23 / 1670
7.8
CVSS
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.5
CVSS
CVE-2025-30397
Exploit Found
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
Severity: HIGH
7.8
CVSS
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Severity: HIGH
5.7
CVSS
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
Severity: MEDIUM
7.5
CVSS
CVE-2025-29969
Exploit Found
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
Severity: HIGH
6.5
CVSS
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.
Severity: MEDIUM
8.8
CVSS
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Severity: HIGH
8.8
CVSS
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
Severity: HIGH