DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Windows: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows 10, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 und Microsoft Windows 11 ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Spoofing-Angriffe durchzuführen, beliebigen Code auszuführen, erhöhte Rechte zu erlangen - sogar SYSTEM-Rechte - und Daten zu manipulieren.
beschreibt (37)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-21420US | — | Exploit | ||
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability | ||||
| CVE-2025-21419US | — | — | ||
Windows Setup Files Cleanup Elevation of Privilege Vulnerability | ||||
| CVE-2025-21418US | —OT kritisch | KEV | ||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||||
| CVE-2025-21414US | — | — | ||
Windows Core Messaging Elevation of Privileges Vulnerability | ||||
| CVE-2025-21410US | — | — | ||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||||
| CVE-2025-21407US | — | — | ||
Windows Telephony Service Remote Code Execution Vulnerability | ||||
| CVE-2025-21406US | — | — | ||
Windows Telephony Service Remote Code Execution Vulnerability | ||||
| CVE-2025-21391US | —OT kritisch | KEV | ||
Windows Storage Elevation of Privilege Vulnerability | ||||
| CVE-2025-21379US | — | — | ||
DHCP Client Service Remote Code Execution Vulnerability | ||||
| CVE-2025-21377US | — | — | ||
NTLM Hash Disclosure Spoofing Vulnerability | ||||
| CVE-2025-21376US | — | — | ||
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | ||||
| CVE-2025-21375US | — | — | ||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||||
| CVE-2025-21373US | — | — | ||
Windows Installer Elevation of Privilege Vulnerability | ||||
| CVE-2025-21371US | — | — | ||
Windows Telephony Service Remote Code Execution Vulnerability | ||||
| CVE-2025-21369US | — | — | ||
Microsoft Digest Authentication Remote Code Execution Vulnerability | ||||
| CVE-2025-21368US | — | — | ||
Microsoft Digest Authentication Remote Code Execution Vulnerability | ||||
| CVE-2025-21367US | — | — | ||
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | ||||
| CVE-2025-21359US | — | — | ||
Windows Kernel Security Feature Bypass Vulnerability | ||||
| CVE-2025-21358US | — | — | ||
Windows Core Messaging Elevation of Privileges Vulnerability | ||||
| CVE-2025-21352US | — | — | ||
Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan