Продукты:
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Уязвимости Угрозы
Главная Уязвимости

Multiple vulnerabilities in Microsoft Windows

Kaspersky ID:
KLA82400
Дата обнаружения:
08/04/2025
Обновлено:
14/04/2025

Описание

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Windows Secure Channel can be exploited remotely to gain privileges.
  2. A security feature bypass vulnerability in BitLocker can be exploited remotely to bypass security restrictions.
  3. A remote code execution vulnerability in Lightweight Directory Access Protocol (LDAP) Client can be exploited remotely to execute arbitrary code.
  4. An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
  5. A remote code execution vulnerability in Windows Telephony Service can be exploited remotely to execute arbitrary code.
  6. A remote code execution vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to execute arbitrary code.
  7. An elevation of privilege vulnerability in DirectX Graphics Kernel can be exploited remotely to gain privileges.
  8. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
  9. A security feature bypass vulnerability in Windows Defender Application Control can be exploited remotely to bypass security restrictions.
  10. An elevation of privilege vulnerability in Windows Bluetooth Service can be exploited remotely to gain privileges.
  11. A remote code execution vulnerability in Windows Media can be exploited remotely to execute arbitrary code.
  12. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  13. A denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to cause denial of service.
  14. An information disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to obtain sensitive information.
  15. An information disclosure vulnerability in Windows Admin Center in Azure Portal can be exploited remotely to obtain sensitive information.
  16. A remote code execution vulnerability in Windows Remote Desktop Services can be exploited remotely to execute arbitrary code.
  17. A denial of service vulnerability in Windows Standards-Based Storage Management Service can be exploited remotely to cause denial of service.
  18. A remote code execution vulnerability in Windows Shell can be exploited remotely to execute arbitrary code.
  19. An information disclosure vulnerability in Windows Resilient File System (ReFS) can be exploited remotely to obtain sensitive information.
  20. A denial of service vulnerability in Windows Local Session Manager (LSM) can be exploited remotely to cause denial of service.
  21. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  22. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  23. An elevation of privilege vulnerability in Windows Mobile Broadband Driver can be exploited remotely to gain privileges.
  24. An elevation of privilege vulnerability in Windows Digital Media can be exploited remotely to gain privileges.
  25. A denial of service vulnerability in Microsoft Streaming Service can be exploited remotely to cause denial of service.
  26. A denial of service vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to cause denial of service.
  27. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
  28. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  29. A denial of service vulnerability in HTTP.sys can be exploited remotely to cause denial of service.
  30. An information disclosure vulnerability in Windows Power Dependency Coordinator can be exploited remotely to obtain sensitive information.
  31. An elevation of privilege vulnerability in Microsoft Virtual Hard Disk can be exploited remotely to gain privileges.
  32. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
  33. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  34. An elevation of privilege vulnerability in Active Directory Domain Services can be exploited remotely to gain privileges.
  35. An elevation of privilege vulnerability in Windows Update Stack can be exploited remotely to gain privileges.
  36. A spoofing vulnerability in Windows Hello can be exploited remotely to spoof user interface.
  37. A security feature bypass vulnerability in Windows Kerberos can be exploited remotely to bypass security restrictions.
  38. An elevation of privilege vulnerability in Windows Local Security Authority (LSA) can be exploited remotely to gain privileges.
  39. A security feature bypass vulnerability in Windows Security Zone Mapping can be exploited remotely to bypass security restrictions.
  40. An elevation of privilege vulnerability in Windows Process Activation can be exploited remotely to gain privileges.
  41. An elevation of privilege vulnerability in Windows USB Print Driver can be exploited remotely to gain privileges.
  42. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
  43. An elevation of privilege vulnerability in Microsoft DWM Core Library can be exploited remotely to gain privileges.
  44. An elevation of privilege vulnerability in Windows Subsystem for Linux can be exploited remotely to gain privileges.
  45. A denial of service vulnerability in Kerberos Key Distribution Proxy Service can be exploited remotely to cause denial of service.
  46. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
  47. An information disclosure vulnerability in Windows Cryptographic Services can be exploited remotely to obtain sensitive information.
  48. A security feature bypass vulnerability in Windows Virtualization-Based Security (VBS) can be exploited remotely to bypass security restrictions.
  49. An information disclosure vulnerability in NTFS can be exploited remotely to obtain sensitive information.
  50. An elevation of privilege vulnerability in Windows Universal Plug and Play (UPnP) Device Host can be exploited remotely to gain privileges.
  51. An elevation of privilege vulnerability in Windows upnphost.dll can be exploited remotely to gain privileges.
  52. An elevation of privilege vulnerability in Windows DWM Core Library can be exploited remotely to gain privileges.
  53. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  54. An elevation of privilege vulnerability in RPC Endpoint Mapper Service can be exploited remotely to gain privileges.
  55. An elevation of privilege vulnerability in Microsoft OpenSSH for Windows can be exploited remotely to gain privileges.
  56. A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
  57. An information disclosure vulnerability in Windows NTFS can be exploited remotely to obtain sensitive information.
  58. A security feature bypass vulnerability in Windows Hello can be exploited remotely to bypass security restrictions.
  59. An elevation of privilege vulnerability in Active Directory Certificate Services can be exploited remotely to gain privileges.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2025-21174
    critical
  • CVE-2025-21191
    high
  • CVE-2025-21197
    high
  • CVE-2025-21203
    high
  • CVE-2025-21204
    critical
  • CVE-2025-21205
    critical
  • CVE-2025-21221
    critical
  • CVE-2025-21222
    critical
  • CVE-2025-24058
    critical
  • CVE-2025-24060
    critical
  • CVE-2025-24062
    critical
  • CVE-2025-24073
    critical
  • CVE-2025-24074
    critical
  • CVE-2025-26635
    high
  • CVE-2025-26637
    high
  • CVE-2025-26639
    critical
  • CVE-2025-26640
    high
  • CVE-2025-26641
    critical
  • CVE-2025-26644
    high
  • CVE-2025-26647
    critical
  • CVE-2025-26648
    critical
  • CVE-2025-26649
    high
  • CVE-2025-26651
    high
  • CVE-2025-26652
    critical
  • CVE-2025-26663
    critical
  • CVE-2025-26664
    high
  • CVE-2025-26665
    high
  • CVE-2025-26666
    critical
  • CVE-2025-26667
    high
  • CVE-2025-26668
    critical
  • CVE-2025-26669
    critical
  • CVE-2025-26670
    critical
  • CVE-2025-26671
    critical
  • CVE-2025-26672
    high
  • CVE-2025-26673
    critical
  • CVE-2025-26674
    critical
  • CVE-2025-26675
    critical
  • CVE-2025-26676
    high
  • CVE-2025-26678
    critical
  • CVE-2025-26679
    critical
  • CVE-2025-26680
    critical
  • CVE-2025-26681
    high
  • CVE-2025-26686
    critical
  • CVE-2025-26687
    critical
  • CVE-2025-26688
    critical
  • CVE-2025-27467
    critical
  • CVE-2025-27469
    critical
  • CVE-2025-27470
    critical
  • CVE-2025-27471
    high
  • CVE-2025-27472
    high
  • CVE-2025-27473
    critical
  • CVE-2025-27474
    high
  • CVE-2025-27475
    high
  • CVE-2025-27476
    critical
  • CVE-2025-27477
    critical
  • CVE-2025-27478
    high
  • CVE-2025-27479
    critical
  • CVE-2025-27480
    critical
  • CVE-2025-27481
    critical
  • CVE-2025-27482
    critical
  • CVE-2025-27483
    critical
  • CVE-2025-27484
    critical
  • CVE-2025-27485
    critical
  • CVE-2025-27486
    critical
  • CVE-2025-27487
    critical
  • CVE-2025-27490
    critical
  • CVE-2025-27491
    high
  • CVE-2025-27492
    high
  • CVE-2025-27727
    critical
  • CVE-2025-27728
    critical
  • CVE-2025-27729
    critical
  • CVE-2025-27730
    critical
  • CVE-2025-27731
    critical
  • CVE-2025-27732
    high
  • CVE-2025-27733
    critical
  • CVE-2025-27735
    high
  • CVE-2025-27736
    high
  • CVE-2025-27737
    critical
  • CVE-2025-27738
    high
  • CVE-2025-27739
    critical
  • CVE-2025-27740
    critical
  • CVE-2025-27741
    critical
  • CVE-2025-27742
    high
  • CVE-2025-29808
    high
  • CVE-2025-29809
    high
  • CVE-2025-29810
    critical
  • CVE-2025-29811
    critical
  • CVE-2025-29812
    critical
  • CVE-2025-29819
    high
  • CVE-2025-29824
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Related articles
17 April 2025
Securelist
Российские организации атакует бэкдор, мимикрирующий под обновления ПО ViPNet
17 April 2025
Securelist
Группа IronHusky обновила MysterySnail для атак на организации в России и Монголии
10 April 2025
Securelist
APT-группа GOFFEE продолжает атаковать организации в России
08 April 2025
Securelist
Как злоумышленники раздают майнер и ClipBanker через SourceForge
07 April 2025
Securelist
Как ToddyCat пытались спрятаться за антивирусом
03 April 2025
Securelist
Managed Detection and Response — отчет за 2024 год
Нашли неточность в описании этой уязвимости?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Нашли новую угрозу или уязвимость?
Если вы нашли новую угрозу или уязвимость, пожалуйста дайте нам знать по электронной почте:
newvirus@kaspersky.com
Продукты
Для дома
Для малого бизнеса
Для среднего бизнеса
Для крупного бизнеса
Select language
Sorting
Kaspersky ID
Уязвимость
Detect date
Уровень угрозы
Confirm changes?
Your message has been sent successfully.