Multiple vulnerabilities in Microsoft Products (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Setup Files Cleanup can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Telephony Service can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Windows NTFS can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Digest Authentication can be exploited remotely to execute arbitrary code.
7. An elevation of privilege vulnerability in Windows Disk Cleanup Tool can be exploited remotely to gain privileges.
8. A security feature bypass vulnerability in Windows Kernel can be exploited remotely to bypass security restrictions.
9. A denial of service vulnerability in Windows Deployment Services can be exploited remotely to cause denial of service.
10. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
11. A spoofing vulnerability in NTLM Hash Disclosure can be exploited remotely to spoof user interface.
12. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
13. A denial of service vulnerability in Internet Connection Sharing (ICS) can be exploited remotely to cause denial of service.
14. A denial of service vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to cause denial of service.
15. A remote code execution vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to execute arbitrary code.
16. A denial of service vulnerability in Windows Kerberos can be exploited remotely to cause denial of service.
17. A remote code execution vulnerability in Windows Telephony Server can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2025-21419
  CVE-2025-21200
  CVE-2025-21371
  CVE-2025-21407
  CVE-2025-21337
  CVE-2025-21190
  CVE-2025-21375
  CVE-2025-21410
  CVE-2025-21368
  CVE-2025-21420
  CVE-2025-21369
  CVE-2025-21359
  CVE-2025-21347
  CVE-2025-21373
  CVE-2025-21377
  CVE-2025-21418
  CVE-2025-21352
  CVE-2025-21181
  CVE-2025-21376
  CVE-2025-21350
  CVE-2025-21208
  CVE-2025-21406
  CVE-2025-21201
  

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

Список CVE

• CVE-2025-21407
  high
• CVE-2025-21410
  high
• CVE-2025-21420
  high
• CVE-2025-21369
  high
• CVE-2025-21347
  high
• CVE-2025-21350
  high
• CVE-2025-21352
  high
• CVE-2025-21419
  high
• CVE-2025-21200
  high
• CVE-2025-21371
  high
• CVE-2025-21337
  warning
• CVE-2025-21190
  high
• CVE-2025-21375
  high
• CVE-2025-21368
  high
• CVE-2025-21359
  high
• CVE-2025-21373
  high
• CVE-2025-21377
  high
• CVE-2025-21418
  high
• CVE-2025-21181
  high
• CVE-2025-21376
  high
• CVE-2025-21208
  high
• CVE-2025-21406
  high
• CVE-2025-21201
  high

Список KB

• 5052038
• 5051972
• 5052020
• 5052042
• 5052032
• 5052016
• 5052072

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com