Vulnerabilities > Microsoft > Windows 11 22H2 > 10.0.22621.4890

DATE CVE VULNERABILITY TITLE RISK
2025-05-13 CVE-2025-29969 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Microsoft products
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
network
high complexity
microsoft CWE-367
7.5
2025-05-13 CVE-2025-29971 Out-of-bounds Read vulnerability in Microsoft Windows 11 22H2
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
network
low complexity
microsoft CWE-125
7.5
2025-05-13 CVE-2025-29974 Integer Underflow (Wrap or Wraparound) vulnerability in Microsoft products
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
low complexity
microsoft CWE-191
5.7
2025-05-13 CVE-2025-29976 Improper Privilege Management vulnerability in Microsoft products
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
local
low complexity
microsoft CWE-269
7.8
2025-03-11 CVE-2025-24054 Unspecified vulnerability in Microsoft products
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
network
low complexity
microsoft
5.4
2025-03-11 CVE-2025-24984 Information Exposure Through Log Files vulnerability in Microsoft products
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
low complexity
microsoft CWE-532
4.6
2025-03-11 CVE-2025-24985 Heap-based Buffer Overflow vulnerability in Microsoft products
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
local
low complexity
microsoft CWE-122
7.8
2025-03-11 CVE-2025-24991 Out-of-bounds Read vulnerability in Microsoft products
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
local
low complexity
microsoft CWE-125
5.5
2025-03-11 CVE-2025-24993 Heap-based Buffer Overflow vulnerability in Microsoft products
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
local
low complexity
microsoft CWE-122
7.8