Multiple vulnerabilities in Microsoft Product (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Client-Side Caching can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
4. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
5. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
7. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
8. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in PowerShell can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2025-62466

• CVE-2025-62455
• CVE-2025-62472
• CVE-2025-62567
• CVE-2025-62458
• CVE-2025-62474
• CVE-2025-62470
• CVE-2025-64667
• CVE-2025-62571
• CVE-2025-64666
• CVE-2025-62473
• CVE-2025-62549
• CVE-2025-64678
• CVE-2025-54100

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008
• Microsoft-Exchange-Server

CVE list

• CVE-2025-54100
  critical
• CVE-2025-62455
  critical
• CVE-2025-62458
  critical
• CVE-2025-62466
  critical
• CVE-2025-62470
  critical
• CVE-2025-62472
  critical
• CVE-2025-62473
  high
• CVE-2025-62474
  critical
• CVE-2025-62549
  critical
• CVE-2025-62567
  high
• CVE-2025-62571
  critical
• CVE-2025-64666
  critical
• CVE-2025-64667
  high
• CVE-2025-64678
  critical

KB list

• 5068909
• 5068906
• 5068904
• 5068907
• 5068908
• 5068905
• 5071501
• 5071506
• 5071507
• 5071873
• 5071875
• 5071505
• 5071874
• 5071503
• 5071504

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com