Kaspersky ID:
KLA80109
Detect Date:
02/11/2025
Updated:
03/25/2025

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Setup Files Cleanup can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Windows Telephony Service can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Windows NTFS can be exploited remotely to gain privileges.
  4. An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
  6. A remote code execution vulnerability in Microsoft Digest Authentication can be exploited remotely to execute arbitrary code.
  7. An elevation of privilege vulnerability in Windows Disk Cleanup Tool can be exploited remotely to gain privileges.
  8. A security feature bypass vulnerability in Windows Kernel can be exploited remotely to bypass security restrictions.
  9. A denial of service vulnerability in Windows Deployment Services can be exploited remotely to cause denial of service.
  10. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  11. A spoofing vulnerability in NTLM Hash Disclosure can be exploited remotely to spoof user interface.
  12. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  13. A denial of service vulnerability in Internet Connection Sharing (ICS) can be exploited remotely to cause denial of service.
  14. A denial of service vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to cause denial of service.
  15. A remote code execution vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to execute arbitrary code.
  16. A denial of service vulnerability in Windows Kerberos can be exploited remotely to cause denial of service.
  17. A remote code execution vulnerability in Windows Telephony Server can be exploited remotely to execute arbitrary code.

Original advisories

Related products

CVE list

  • CVE-2025-21407
    critical
  • CVE-2025-21410
    critical
  • CVE-2025-21420
    critical
  • CVE-2025-21369
    critical
  • CVE-2025-21347
    high
  • CVE-2025-21350
    high
  • CVE-2025-21352
    high
  • CVE-2025-21419
    high
  • CVE-2025-21200
    critical
  • CVE-2025-21371
    critical
  • CVE-2025-21337
    warning
  • CVE-2025-21190
    critical
  • CVE-2025-21375
    critical
  • CVE-2025-21368
    critical
  • CVE-2025-21359
    critical
  • CVE-2025-21373
    critical
  • CVE-2025-21377
    high
  • CVE-2025-21418
    critical
  • CVE-2025-21181
    critical
  • CVE-2025-21376
    critical
  • CVE-2025-21208
    critical
  • CVE-2025-21406
    critical
  • CVE-2025-21201
    critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.