Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

1. Heap buffer overflow vulnerability can be exploited remotely to gain privileges.
2. Out of bounds memory read vulnerability can be exploited remotely to gain privileges.

Original advisories

• CVE-2025-65018

• CVE-2025-64720

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-10

CVE list

• CVE-2025-64720
  high
• CVE-2025-65018
  high

KB list

• 5082200
• 5082127
• 5082126

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com