Multiple vulnerabilities in Microsoft Product (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Windows Client-Side Caching can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ) can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
4. A denial of service vulnerability in Windows Hyper-V can be exploited remotely to cause denial of service.
5. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
7. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
8. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in PowerShell can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2025-62466
  CVE-2025-62455
  CVE-2025-62472
  CVE-2025-62567
  CVE-2025-62458
  CVE-2025-62474
  CVE-2025-62470
  CVE-2025-64667
  CVE-2025-62571
  CVE-2025-64666
  CVE-2025-62473
  CVE-2025-62549
  CVE-2025-64678
  CVE-2025-54100
  

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008
• Microsoft-Exchange-Server

Список CVE

• CVE-2025-54100
  critical
• CVE-2025-62455
  critical
• CVE-2025-62458
  critical
• CVE-2025-62466
  critical
• CVE-2025-62470
  critical
• CVE-2025-62472
  critical
• CVE-2025-62473
  high
• CVE-2025-62474
  critical
• CVE-2025-62549
  critical
• CVE-2025-62567
  high
• CVE-2025-62571
  critical
• CVE-2025-64666
  critical
• CVE-2025-64667
  high
• CVE-2025-64678
  critical

Список KB

• 5068909
• 5068906
• 5068904
• 5068907
• 5068908
• 5068905
• 5071501
• 5071506
• 5071507
• 5071873
• 5071875
• 5071505
• 5071874
• 5071503
• 5071504

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com