WID-SEC-W-2025-0331

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows: Mehrere Schwachstellen

view advisory published 2025-02-11

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows 10, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 und Microsoft Windows 11 ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Spoofing-Angriffe durchzuführen, beliebigen Code auszuführen, erhöhte Rechte zu erlangen - sogar SYSTEM-Rechte - und Daten zu manipulieren.

01

describes (37)

Related CVEs.

IDseverity exploitable
CVE-2025-21420US—Exploit
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVE-2025-21419US——
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVE-2025-21418US—OT criticalKEV
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21414US——
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21410US——
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21407US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21406US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21391US—OT criticalKEV
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21379US——
DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-21377US——
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-21376US——
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2025-21375US——
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2025-21373US——
Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21371US——
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21369US——
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21368US——
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21367US——
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-21359US——
Windows Kernel Security Feature Bypass Vulnerability
CVE-2025-21358US——
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21352US——
Internet Connection Sharing (ICS) Denial of Service Vulnerability
showing 20 of 37
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan