Microsoft update

KB5051989

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4890
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4890
Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4890
Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4890

Fixes 32 records

TI-2025-15382 CVE-2025-21418 · GHSA-5fhq-7w32-vhww

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02132 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15357 CVE-2025-21391 · GHSA-hq9p-wcjc-wqxg

Windows Storage Elevation of Privilege Vulnerability

CRITICAL 88KEV

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.02284 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-59

TI-2025-15344 CVE-2025-21377 · GHSA-mhwv-rjc9-g3g8

NTLM Hash Disclosure Spoofing Vulnerability

MEDIUM 56

NTLM Hash Disclosure Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.39926 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-73

TI-2025-15343 CVE-2025-21376 · GHSA-fwv6-m7wj-gm63

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 49

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.09313 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15338 CVE-2025-21371 · GHSA-qr28-8qqx-q5pp

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 45

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02433 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15372 CVE-2025-21407 · GHSA-pw45-vmfj-8r3j

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01818 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15371 CVE-2025-21406 · GHSA-h42c-p46c-32vf

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01818 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-416

TI-2025-15336 CVE-2025-21369 · GHSA-25h6-xmmh-34gc

Microsoft Digest Authentication Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02151 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15335 CVE-2025-21368 · GHSA-4hpj-87mp-j2fq

Microsoft Digest Authentication Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02151 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15319 CVE-2025-21351 · GHSA-xh69-9jx5-xgph

Windows Active Directory Domain Services API Denial of Service Vulnerability

MEDIUM 44

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02474 Published 2025-02-11 Fixed in 10.0.14393.7785, 10.0.17763.6893 +7 CWE-400

TI-2025-15170 CVE-2025-21201 · GHSA-5572-v74v-4p6x

Windows Telephony Server Remote Code Execution Vulnerability

MEDIUM 44

Windows Telephony Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01812 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-415

TI-2025-15169 CVE-2025-21200 · GHSA-4fcp-ccxj-vf2h

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01812 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15161 CVE-2025-21190 · GHSA-cp3g-mr7f-v756

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01812 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15384 CVE-2025-21420 · GHSA-94c3-phmr-h8qw

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

MEDIUM 42

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03668 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +10 CWE-59

TI-2025-15152 CVE-2025-21181 · GHSA-h6q4-jv34-9rpm

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

LOW 39

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03482 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-400

TI-2025-15342 CVE-2025-21375 · GHSA-pv9c-fcpr-29jv

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

LOW 37

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00648 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-122

TI-2025-15340 CVE-2025-21373 · GHSA-h3rm-rvv5-pghv

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.008 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-59

TI-2025-15334 CVE-2025-21367 · GHSA-r7mf-p426-hpwr

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

LOW 37

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00643 Published 2025-02-11 Fixed in 10.0.17763.6893, 10.0.19044.5487 +6 CWE-416

TI-2025-15326 CVE-2025-21359 · GHSA-5h34-2v2x-rw9w

Windows Kernel Security Feature Bypass Vulnerability

LOW 37

Windows Kernel Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00561 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-284

TI-2025-15325 CVE-2025-21358 · GHSA-p59c-xgjv-wj3r

Windows Core Messaging Elevation of Privileges Vulnerability

LOW 37

Windows Core Messaging Elevation of Privileges Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00759 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-822

TI-2025-19570 CVE-2025-26634 · GHSA-62q2-gc88-c4rh

Windows Core Messaging Elevation of Privileges Vulnerability

LOW 36

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00674 Published 2025-03-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-122

TI-2025-15383 CVE-2025-21419 · GHSA-rmvc-x4jp-8q6j

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

LOW 34

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00724 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +11 CWE-59

TI-2025-15378 CVE-2025-21414 · GHSA-j648-pq8h-2wmc

Windows Core Messaging Elevation of Privileges Vulnerability

LOW 34

Windows Core Messaging Elevation of Privileges Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00607 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-122

TI-2025-15317 CVE-2025-21349 · GHSA-h6vc-5925-xpc3

Windows Remote Desktop Configuration Service Tampering Vulnerability

LOW 34

Windows Remote Desktop Configuration Service Tampering Vulnerability

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01141 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-287

TI-2025-15155 CVE-2025-21184 · GHSA-884v-fpxm-8fhr

Windows Core Messaging Elevation of Privileges Vulnerability

LOW 34

Windows Core Messaging Elevation of Privileges Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00605 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +8 CWE-122

TI-2025-15320 CVE-2025-21352 · GHSA-g9v9-w2cq-vjc2

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01035 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-400

TI-2025-15318 CVE-2025-21350 · GHSA-x3ph-6h66-2jm6

Windows Kerberos Denial of Service Vulnerability

LOW 31

Windows Kerberos Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02127 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-20

TI-2025-15222 CVE-2025-21254 · GHSA-hrr3-x5rf-qxxj

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01035 Published 2025-02-11 Fixed in 10.0.14393.7785, 10.0.17763.6893 +7 CWE-125

TI-2025-15184 CVE-2025-21216 · GHSA-x2mr-xj96-pc8h

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01031 Published 2025-02-11 Fixed in 10.0.14393.7785, 10.0.17763.6893 +7 CWE-125

TI-2025-15180 CVE-2025-21212 · GHSA-hwfp-94f2-m6rh

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01031 Published 2025-02-11 Fixed in 10.0.14393.7785, 10.0.17763.6893 +7 CWE-125

TI-2025-15315 CVE-2025-21347 · GHSA-8pmq-vh8m-9xj5

Windows Deployment Services Denial of Service Vulnerability

LOW 28

Windows Deployment Services Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00656 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +10 CWE-59

TI-2025-15305 CVE-2025-21337 · GHSA-3w7j-22pr-7fp6

Windows NTFS Elevation of Privilege Vulnerability

LOW 17

Windows NTFS Elevation of Privilege Vulnerability

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00608 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-284