Multiple vulnerabilities in Microsoft Products (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
3. A security feature bypass vulnerability in MapUrlToZone can be exploited remotely to bypass security restrictions.
4. A remote code execution vulnerability in Windows SMB Client can be exploited remotely to execute arbitrary code.
5. An elevation of privilege vulnerability in Windows Defender Firewall Service can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Hyper-V can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to obtain sensitive information.
8. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
9. An elevation of privilege vulnerability in Windows NTLM can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Windows Kernel Memory can be exploited remotely to obtain sensitive information.
11. An elevation of privilege vulnerability in Local Security Authority Subsystem Service can be exploited remotely to gain privileges.
12. An elevation of privilege vulnerability in Windows BitLocker can be exploited remotely to gain privileges.
13. An information disclosure vulnerability in Windows Imaging Component can be exploited remotely to obtain sensitive information.
14. An elevation of privilege vulnerability in Windows TCP/IP Driver can be exploited remotely to gain privileges.
15. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
16. An elevation of privilege vulnerability in SPNEGO Extended Negotiation (NEGOEX) Security Mechanism can be exploited remotely to gain privileges.
17. An elevation of privilege vulnerability in Windows SMB can be exploited remotely to gain privileges.
18. A remote code execution vulnerability in Graphics Kernel can be exploited remotely to execute arbitrary code.
19. An information disclosure vulnerability in Windows Kernel-Mode Driver can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2025-54099
  CVE-2025-54110
  CVE-2025-54107
  CVE-2025-54101
  CVE-2025-53808
  CVE-2025-54091
  CVE-2025-55225
  CVE-2025-54113
  CVE-2025-53806
  CVE-2025-54098
  CVE-2025-54918
  CVE-2025-53810
  CVE-2025-53803
  CVE-2025-54095
  CVE-2025-53797
  CVE-2025-54894
  CVE-2025-53798
  CVE-2025-54096
  CVE-2025-53796
  CVE-2025-54104
  CVE-2025-54912
  CVE-2025-54106
  CVE-2025-53799
  CVE-2025-54917
  CVE-2025-54097
  CVE-2025-54093
  CVE-2025-54916
  CVE-2025-54895
  CVE-2025-54915
  CVE-2025-55234
  CVE-2025-54109
  CVE-2025-55226
  CVE-2025-53804
  CVE-2025-54911
  CVE-2025-54094
  

Связанные продукты

• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

Список CVE

• CVE-2025-53796
  high
• CVE-2025-53797
  high
• CVE-2025-53798
  high
• CVE-2025-53799
  high
• CVE-2025-53803
  high
• CVE-2025-53804
  high
• CVE-2025-53806
  high
• CVE-2025-53808
  high
• CVE-2025-53810
  high
• CVE-2025-54091
  critical
• CVE-2025-54093
  high
• CVE-2025-54094
  high
• CVE-2025-54095
  high
• CVE-2025-54096
  high
• CVE-2025-54097
  high
• CVE-2025-54098
  critical
• CVE-2025-54099
  high
• CVE-2025-54101
  warning
• CVE-2025-54104
  high
• CVE-2025-54106
  critical
• CVE-2025-54107
  warning
• CVE-2025-54109
  high
• CVE-2025-54110
  critical
• CVE-2025-54113
  critical
• CVE-2025-54894
  critical
• CVE-2025-54895
  critical
• CVE-2025-54911
  high
• CVE-2025-54912
  critical
• CVE-2025-54915
  high
• CVE-2025-54916
  critical
• CVE-2025-54917
  warning
• CVE-2025-54918
  critical
• CVE-2025-55225
  high
• CVE-2025-55226
  high
• CVE-2025-55234
  critical

Список KB

• 5065468
• 5065511
• 5065508
• 5065510
• 5065509
• 5065507
• 5065435

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com