Read the docs
Microsoft update

KB5053627

Security Only

View on Microsoft →

Fixed in

Fixes 20 records

Priority CRITICAL 93KEV

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02216 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-122
Priority CRITICAL 90KEV

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.30391 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-707
Priority CRITICAL 90KEV

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0187 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +4 CWE-416
TI-2025-17816 CVE-2025-24054 · GHSA-6v67-599p-fprc

NTLM Hash Disclosure Spoofing Vulnerability

Priority CRITICAL 86KEV

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.6227 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +11 CWE-73
Priority HIGH 82KEV

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.02018 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-125
Priority MEDIUM 46

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03182 Published 2025-03-11 Fixed in 1.2.6017.0, 10.0.10240.20947 +14 CWE-23
Priority MEDIUM 43

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01575 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-122
Priority MEDIUM 41

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01719 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-591
Priority LOW 38

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00949 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-122
Priority LOW 37

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00544 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-125
TI-2025-18674 CVE-2025-24996 · GHSA-x9f4-v83p-9c3c

NTLM Hash Disclosure Spoofing Vulnerability

Priority LOW 32

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01341 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +11 CWE-73
Priority LOW 27

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01067 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-126
Priority LOW 26

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03051 Published 2025-03-11 Fixed in 10.0.10240.20947, 10.0.14393.7876 +12 CWE-41