Microsoft update

KB5049994

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.003
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.003
Windows Server 2008 for 32-bit Systems Service Pack 2 1.007
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.007
Windows Server 2008 for x64-based Systems Service Pack 2 1.007
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.007
Windows Server 2012 1.003
Windows Server 2012 (Server Core installation) 1.003
Windows Server 2012 R2 1.002
Windows Server 2012 R2 (Server Core installation) 1.002

TI-2025-15244 CVE-2025-21276 · GHSA-cx2h-5vcq-pfj4

MEDIUM 44

Windows MapUrlToZone Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02456 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-191

TI-2025-15300 CVE-2025-21332 · GHSA-3pvj-gf5m-rhhf

MEDIUM 41

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01495 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15237 CVE-2025-21269 · GHSA-jf83-84h5-5cc4

LOW 27

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.04497 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15160 CVE-2025-21189 · GHSA-3gf9-c7wr-m575

LOW 25

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02908 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15236 CVE-2025-21268 · GHSA-vp5q-499v-968r

LOW 24

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01947 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15297 CVE-2025-21329 · GHSA-5w98-4m6q-799m

LOW 23

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01486 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41

TI-2025-15296 CVE-2025-21328 · GHSA-8r3x-3hj4-q58p

LOW 23

MapUrlToZone Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01486 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-41