Microsoft update

KB5050006

Security Only

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27520
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27520

Fixes 71 records

TI-2025-15266 CVE-2025-21298 · GHSA-f7p3-668r-j598

Windows OLE Remote Code Execution Vulnerability

CRITICAL 87

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74369 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-416

TI-2025-15253 CVE-2025-21285 · GHSA-w2xr-7cgg-6wx5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 72

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.56161 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-476

TI-2025-15245 CVE-2025-21277 · GHSA-3jcg-qpj5-r3rp

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 66

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.39056 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-126

TI-2025-15275 CVE-2025-21307 · GHSA-j9w9-6jj7-c2px

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

MEDIUM 53

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01937 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-416

TI-2025-15268 CVE-2025-21300 · GHSA-2jcp-473g-fc9m

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

MEDIUM 44

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02568 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15219 CVE-2025-21251 · GHSA-gqc7-gjgf-xvmg

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02628 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15199 CVE-2025-21231 · GHSA-3hqw-55xh-q6hf

IP Helper Denial of Service Vulnerability

MEDIUM 44

IP Helper Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02628 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15198 CVE-2025-21230 · GHSA-83vh-f4w7-rg8v

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02724 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-20

TI-2025-15355 CVE-2025-21389 · GHSA-8fj2-r7qc-chj6

Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

MEDIUM 43

Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01967 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15274 CVE-2025-21306 · GHSA-v9wq-479p-2jwm

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15273 CVE-2025-21305 · GHSA-w8wg-643q-c36v

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15271 CVE-2025-21303 · GHSA-mwq3-xjfp-cjg3

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15270 CVE-2025-21302 · GHSA-9g28-fpjj-mjvm

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15258 CVE-2025-21290 · GHSA-w825-mc9p-6wp6

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15257 CVE-2025-21289 · GHSA-rpr6-945p-jm7x

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15254 CVE-2025-21286 · GHSA-2p7g-v48x-6m2c

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15250 CVE-2025-21282 · GHSA-6v58-wchf-wjx9

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15241 CVE-2025-21273 · GHSA-v6xj-8rhx-w2r4

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15238 CVE-2025-21270 · GHSA-6xwm-5jc9-ww35

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02429 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-400

TI-2025-15234 CVE-2025-21266 · GHSA-9rg8-84xx-j7x9

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01285 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15220 CVE-2025-21252 · GHSA-hgjf-cqqh-7c7c

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01435 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15218 CVE-2025-21250 · GHSA-7pgh-vvx6-7g2r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15214 CVE-2025-21246 · GHSA-c735-gp9w-6hcw

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15213 CVE-2025-21245 · GHSA-wjm7-5g3p-88v2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15212 CVE-2025-21244 · GHSA-r6pg-vpjp-mw6r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-190

TI-2025-15211 CVE-2025-21243 · GHSA-qrj7-3jjm-h7x2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-190

TI-2025-15208 CVE-2025-21240 · GHSA-4wmv-7xrq-8xxw

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15206 CVE-2025-21238 · GHSA-49vp-7qg3-f9gx

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15205 CVE-2025-21237 · GHSA-hrqr-g8jf-f28f

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15204 CVE-2025-21236 · GHSA-w4cp-3f3m-xjx3

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15201 CVE-2025-21233 · GHSA-7hxv-jvhc-mgrx

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0171 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15191 CVE-2025-21223 · GHSA-hxxh-jpvq-vr5x

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15188 CVE-2025-21220 · GHSA-9qg4-92rx-rmr9

Microsoft Message Queuing Information Disclosure Vulnerability

MEDIUM 43

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02106 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15381 CVE-2025-21417 · GHSA-2jqv-6gjj-98r2

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01187 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15377 CVE-2025-21413 · GHSA-h4x8-pvww-m327

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15376 CVE-2025-21411 · GHSA-p246-2wqm-73pp

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15374 CVE-2025-21409 · GHSA-44vv-6vcv-9h7r

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15307 CVE-2025-21339 · GHSA-2p5v-755j-54f5

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01123 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15263 CVE-2025-21295 · GHSA-w9m7-qmvh-fvcw

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

MEDIUM 41

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01633 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-416

TI-2025-15265 CVE-2025-21297 · GHSA-w569-9p5v-c7v7

Windows Remote Desktop Services Remote Code Execution Vulnerability

MEDIUM 40

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2025-01-14 Fixed in 6.1.7601.27520, 6.2.9200.25273 +6 CWE-416

TI-2025-15262 CVE-2025-21294 · GHSA-7h9g-r6hv-4q98

Microsoft Digest Authentication Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01226 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-591

TI-2025-15306 CVE-2025-21338 · GHSA-88gx-r57m-pghv

GDI+ Remote Code Execution Vulnerability

LOW 37

GDI+ Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00483 Published 2025-01-14 Fixed in 16.0.18429.20000, 2.93.24123014 +16 CWE-190

TI-2025-15255 CVE-2025-21287 · GHSA-wjfg-g3gx-pmfx

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00554 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-269

TI-2025-15299 CVE-2025-21331 · GHSA-qxh8-4p4c-qchr

Windows Installer Elevation of Privilege Vulnerability

LOW 36

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01063 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-59

TI-2025-15264 CVE-2025-21296 · GHSA-r4x4-pw96-gj4q

BranchCache Remote Code Execution Vulnerability

LOW 36

BranchCache Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00789 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-416

TI-2025-15295 CVE-2025-21327 · GHSA-3v2q-pqp4-rfp4

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15292 CVE-2025-21324 · GHSA-fcxq-5j9x-8f72

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15278 CVE-2025-21310 · GHSA-c6gj-jrcc-q2j8

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15233 CVE-2025-21265 · GHSA-9fhh-4gq6-pq2g

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15231 CVE-2025-21263 · GHSA-c5jj-jmhg-pcj9

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15229 CVE-2025-21261 · GHSA-mwvv-h2v8-35j6

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0077 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15228 CVE-2025-21260 · GHSA-6q64-xfhv-9jpq

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15226 CVE-2025-21258 · GHSA-j58w-j7x2-v25v

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15224 CVE-2025-21256 · GHSA-rv7m-pr5x-3rwr

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-122

TI-2025-15223 CVE-2025-21255 · GHSA-r7wm-q44r-7365

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15217 CVE-2025-21249 · GHSA-r8vg-q4g8-j937

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15200 CVE-2025-21232 · GHSA-h723-vq6q-mqgg

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15196 CVE-2025-21228 · GHSA-f6jw-ch5j-r8hr

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15195 CVE-2025-21227 · GHSA-q38m-5f88-27wv

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00846 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15194 CVE-2025-21226 · GHSA-jf89-rq94-wxx7

Windows Digital Media Elevation of Privilege Vulnerability

LOW 33

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.0088 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15185 CVE-2025-21217 · GHSA-2gwv-hh3j-cx86

Windows NTLM Spoofing Vulnerability

LOW 33

Windows NTLM Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01975 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-693

TI-2025-15309 CVE-2025-21341 · GHSA-g98c-v7wv-8hq9

Windows Digital Media Elevation of Privilege Vulnerability

LOW 32

Windows Digital Media Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00708 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15256 CVE-2025-21288 · GHSA-pxf8-r239-8j9j

Windows COM Server Information Disclosure Vulnerability

LOW 30

Windows COM Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00712 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15240 CVE-2025-21272 · GHSA-m35h-5xhm-6j2c

Windows COM Server Information Disclosure Vulnerability

LOW 30

Windows COM Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00712 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-908

TI-2025-15210 CVE-2025-21242 · GHSA-hxqj-2w4q-6p3c

Windows Kerberos Information Disclosure Vulnerability

LOW 30

Windows Kerberos Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01611 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-200

TI-2025-15288 CVE-2025-21320 · GHSA-ww6w-vmf9-9rg3

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-532

TI-2025-15287 CVE-2025-21319 · GHSA-mmw4-f58v-gj6m

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00991 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +11 CWE-532

TI-2025-15304 CVE-2025-21336 · GHSA-r8xh-9645-25vq

Windows Cryptographic Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00672 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-203

TI-2025-15183 CVE-2025-21215 · GHSA-fhhj-f5rc-qp5f

Secure Boot Security Feature Bypass Vulnerability

LOW 23

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00808 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-125

TI-2025-15178 CVE-2025-21210 · GHSA-vphw-2w3h-qj8c

Windows BitLocker Information Disclosure Vulnerability

LOW 22

Windows BitLocker Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.01115 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-636

TI-2025-15182 CVE-2025-21214 · GHSA-c6m2-mj7g-44c8

Windows BitLocker Information Disclosure Vulnerability

LOW 21

Windows BitLocker Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00704 Published 2025-01-14 Fixed in 10.0.10240.20890, 10.0.14393.7699 +12 CWE-200