WID-SEC-W-2025-0091

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows: Mehrere Schwachstellen

view advisory published 2025-01-14

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Spoofing-Angriff durchzuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.

01

describes (133)

Related CVEs.

IDseverity exploitable
CVE-2025-21325US——
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2025-21417US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21413US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21411US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21409US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21389US——
Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
CVE-2025-21382US——
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2025-21378US——
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2025-21374US——
Windows CSC Service Information Disclosure Vulnerability
CVE-2025-21372US——
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21370UShigh8.8—
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2025-21343US——
Windows Web Threat Defense User Service Information Disclosure Vulnerability
CVE-2025-21341US——
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21340US—Exploit
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
CVE-2025-21339US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21338US——
GDI+ Remote Code Execution Vulnerability
CVE-2025-21336US——
Windows Cryptographic Information Disclosure Vulnerability
CVE-2025-21335US—OT criticalKEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334US—OT criticalKEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21333US—OT criticalKEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
showing 20 of 133
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan