Multiple vulnerabilities in Microsoft Products (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (ESU). Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user interface.

Below is a complete list of vulnerabilities:

1. Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
2. An elevation of privilege vulnerability in Windows Device Health Attestation (DHA) can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Windows Universal Disk Format File System Driver (UDFS) can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Microsoft Kinect can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows DNS Client can be exploited remotely to gain privileges.
7. An elevation of privilege vulnerability in Windows Projected File System can be exploited remotely to gain privileges.
8. An elevation of privilege vulnerability in Windows Function Discovery Service (fdwsd.dll) can be exploited remotely to gain privileges.
9. A denial of service vulnerability in Windows Kerberos can be exploited remotely to cause denial of service.
10. An elevation of privilege vulnerability in Windows TCP/IP can be exploited remotely to gain privileges.
11. An elevation of privilege vulnerability in Windows DWM Core Library can be exploited remotely to gain privileges.
12. An information disclosure vulnerability in Windows Shell can be exploited remotely to obtain sensitive information.
13. An information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely to obtain sensitive information.
14. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
15. An elevation of privilege vulnerability in Windows Telephony Service can be exploited remotely to gain privileges.
16. A denial of service vulnerability in Windows TCP/IP can be exploited remotely to cause denial of service.
17. An elevation of privilege vulnerability in NT OS Kernel can be exploited remotely to gain privileges.
18. An information disclosure vulnerability in Windows Telephony Server can be exploited remotely to obtain sensitive information.
19. An information disclosure vulnerability in Windows Push Notification can be exploited remotely to obtain sensitive information.
20. An information disclosure vulnerability in Windows Hyper-V can be exploited remotely to obtain sensitive information.
21. An elevation of privilege vulnerability in Windows Push Notifications can be exploited remotely to gain privileges.
22. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
23. An elevation of privilege vulnerability in Microsoft Graphics Component can be exploited remotely to gain privileges.
24. Security vulnerability can be exploited to bypass security restrictions.
25. An elevation of privilege vulnerability in Winlogon can be exploited remotely to gain privileges.
26. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
27. A remote code execution vulnerability in DHCP Client Service can be exploited remotely to execute arbitrary code.
28. An elevation of privilege vulnerability in Windows Program Compatibility Assistant Service can be exploited remotely to gain privileges.
29. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
30. An information disclosure vulnerability in Microsoft Exchange Server can be exploited remotely to obtain sensitive information.
31. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
32. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remotely to execute arbitrary code.
33. An elevation of privilege vulnerability in Windows Collaborative Translation Framework (CTFMON) can be exploited remotely to gain privileges.
34. A security feature bypass vulnerability in Secure Boot can be exploited remotely to bypass security restrictions.
35. An elevation of privilege vulnerability in Windows Internet (wininet.dll) can be exploited remotely to gain privileges.
36. An elevation of privilege vulnerability in Windows SDK can be exploited remotely to gain privileges.
37. An information disclosure vulnerability in Windows Application Identity (AppID) can be exploited remotely to obtain sensitive information.
38. A security feature bypass vulnerability in Windows Mark of the Web can be exploited remotely to bypass security restrictions.
39. A remote code execution vulnerability in Windows UPnP Device Host can be exploited remotely to execute arbitrary code.
40. A tampering vulnerability in Windows Dynamic Host Configuration Protocol (DHCP) can be exploited remotely to spoof user interface.
41. An elevation of privilege vulnerability in Windows Bluetooth Service can be exploited remotely to gain privileges.
42. A denial of service vulnerability in Microsoft UxTheme Library (uxtheme.dll) can be exploited remotely to cause denial of service.
43. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
44. An information disclosure vulnerability in Windows DHCP Client can be exploited remotely to obtain sensitive information.
45. A remote code execution vulnerability in Windows NTFS can be exploited remotely to execute arbitrary code.
46. An elevation of privilege vulnerability in Microsoft DWM Core Library can be exploited remotely to gain privileges.
47. An elevation of privilege vulnerability in Windows Bluetooth Port Driver can be exploited remotely to gain privileges.
48. A spoofing vulnerability in Microsoft Azure Attestation service and Device Health Attestation Service can be exploited remotely to spoof user interface.
49. A security feature bypass vulnerability in Windows BitLocker can be exploited remotely to bypass security restrictions.
50. A security feature bypass vulnerability in UEFI Secure Boot can be exploited remotely to bypass security restrictions.
51. A remote code execution vulnerability in HTTP.sys can be exploited remotely to execute arbitrary code.
52. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
53. A security feature bypass vulnerability in Windows Boot Manager can be exploited remotely to bypass security restrictions.
54. A remote code execution vulnerability in Windows Media can be exploited remotely to execute arbitrary code.
55. A security feature bypass vulnerability in Secure Boot can be exploited remotely to gain privileges.
56. A denial of service vulnerability in HTTP.sys can be exploited remotely to cause denial of service.
57. A spoofing vulnerability in Windows NTLM can be exploited remotely to spoof user interface.

Первичный источник обнаружения

• CVE-2025-10263
  CVE-2026-33828
  CVE-2026-34335
  CVE-2026-40404
  CVE-2026-40409
  CVE-2026-41092
  CVE-2026-41108
  CVE-2026-42828
  CVE-2026-42836
  CVE-2026-42837
  CVE-2026-42903
  CVE-2026-42904
  CVE-2026-42905
  CVE-2026-42906
  CVE-2026-42907
  CVE-2026-42908
  CVE-2026-42909
  CVE-2026-42911
  CVE-2026-42912
  CVE-2026-42914
  CVE-2026-42915
  CVE-2026-42916
  CVE-2026-42968
  CVE-2026-42969
  CVE-2026-42970
  CVE-2026-42971
  CVE-2026-42972
  CVE-2026-42973
  CVE-2026-42977
  CVE-2026-42978
  CVE-2026-42979
  CVE-2026-42980
  CVE-2026-42983
  CVE-2026-42984
  CVE-2026-42985
  CVE-2026-42986
  CVE-2026-42987
  CVE-2026-42989
  CVE-2026-42991
  CVE-2026-42992
  CVE-2026-42993
  CVE-2026-44799
  CVE-2026-44801
  CVE-2026-44802
  CVE-2026-44803
  CVE-2026-44812
  CVE-2026-44815
  CVE-2026-45487
  CVE-2026-45500
  CVE-2026-45501
  CVE-2026-45502
  CVE-2026-45503
  CVE-2026-45504
  CVE-2026-45583
  CVE-2026-45586
  CVE-2026-45588
  CVE-2026-45592
  CVE-2026-45593
  CVE-2026-45594
  CVE-2026-45595
  CVE-2026-45596
  CVE-2026-45598
  CVE-2026-45599
  CVE-2026-45601
  CVE-2026-45602
  CVE-2026-45603
  CVE-2026-45605
  CVE-2026-45606
  CVE-2026-45607
  CVE-2026-45608
  CVE-2026-45634
  CVE-2026-45635
  CVE-2026-45636
  CVE-2026-45637
  CVE-2026-45638
  CVE-2026-45639
  CVE-2026-45640
  CVE-2026-45641
  CVE-2026-45642
  CVE-2026-45653
  CVE-2026-45655
  CVE-2026-45656
  CVE-2026-45658
  CVE-2026-47288
  CVE-2026-47289
  CVE-2026-47291
  CVE-2026-47631
  CVE-2026-47648
  CVE-2026-47653
  CVE-2026-47656
  CVE-2026-48563
  CVE-2026-48568
  CVE-2026-48570
  CVE-2026-48573
  CVE-2026-48574
  CVE-2026-48575
  CVE-2026-48576
  CVE-2026-48578
  CVE-2026-48583
  CVE-2026-49160
  CVE-2026-50507
  CVE-2026-50508
  CVE-2026-8863
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Список CVE

• CVE-2025-10263
  critical
• CVE-2026-33828
  critical
• CVE-2026-34335
  high
• CVE-2026-40404
  critical
• CVE-2026-40409
  critical
• CVE-2026-41092
  critical
• CVE-2026-41108
  high
• CVE-2026-42828
  critical
• CVE-2026-42836
  high
• CVE-2026-42837
  critical
• CVE-2026-42903
  high
• CVE-2026-42904
  critical
• CVE-2026-42905
  critical
• CVE-2026-42906
  high
• CVE-2026-42907
  high
• CVE-2026-42908
  critical
• CVE-2026-42909
  critical
• CVE-2026-42911
  high
• CVE-2026-42912
  high
• CVE-2026-42914
  high
• CVE-2026-42915
  high
• CVE-2026-42916
  critical
• CVE-2026-42968
  high
• CVE-2026-42969
  high
• CVE-2026-42970
  high
• CVE-2026-42971
  high
• CVE-2026-42972
  high
• CVE-2026-42973
  high
• CVE-2026-42977
  critical
• CVE-2026-42978
  critical
• CVE-2026-42979
  critical
• CVE-2026-42980
  critical
• CVE-2026-42983
  critical
• CVE-2026-42984
  high
• CVE-2026-42985
  critical
• CVE-2026-42986
  critical
• CVE-2026-42987
  critical
• CVE-2026-42989
  critical
• CVE-2026-42991
  critical
• CVE-2026-42992
  critical
• CVE-2026-42993
  critical
• CVE-2026-44799
  critical
• CVE-2026-44801
  critical
• CVE-2026-44802
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-44815
  critical
• CVE-2026-45487
  high
• CVE-2026-45500
  high
• CVE-2026-45501
  high
• CVE-2026-45502
  warning
• CVE-2026-45503
  high
• CVE-2026-45504
  critical
• CVE-2026-45583
  critical
• CVE-2026-45586
  critical
• CVE-2026-45588
  critical
• CVE-2026-45592
  critical
• CVE-2026-45593
  critical
• CVE-2026-45594
  high
• CVE-2026-45595
  high
• CVE-2026-45596
  high
• CVE-2026-45598
  high
• CVE-2026-45599
  critical
• CVE-2026-45601
  high
• CVE-2026-45602
  critical
• CVE-2026-45603
  high
• CVE-2026-45605
  critical
• CVE-2026-45606
  high
• CVE-2026-45607
  critical
• CVE-2026-45608
  high
• CVE-2026-45634
  high
• CVE-2026-45635
  critical
• CVE-2026-45636
  critical
• CVE-2026-45637
  critical
• CVE-2026-45638
  critical
• CVE-2026-45639
  critical
• CVE-2026-45640
  high
• CVE-2026-45641
  critical
• CVE-2026-45642
  warning
• CVE-2026-45653
  high
• CVE-2026-45655
  high
• CVE-2026-45656
  critical
• CVE-2026-45658
  high
• CVE-2026-47288
  high
• CVE-2026-47289
  critical
• CVE-2026-47291
  critical
• CVE-2026-47631
  high
• CVE-2026-47648
  high
• CVE-2026-47653
  critical
• CVE-2026-47656
  critical
• CVE-2026-48563
  critical
• CVE-2026-48568
  critical
• CVE-2026-48570
  critical
• CVE-2026-48573
  critical
• CVE-2026-48574
  critical
• CVE-2026-48575
  critical
• CVE-2026-48576
  critical
• CVE-2026-48578
  critical
• CVE-2026-48583
  critical
• CVE-2026-49160
  critical
• CVE-2026-50507
  high
• CVE-2026-50508
  critical
• CVE-2026-8863
  critical

Список KB

• 5093998
• 5094127
• 5094006
• 5094041
• 5094042
• 5103213
• 5103214
• 5103215

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com