Microsoft update

KB5061198

Monthly Rollup

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23317
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23317
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23317
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23317

TI-2025-23773 CVE-2025-32709 · GHSA-jwq6-vvcv-h2px

CRITICAL 93KEV

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01818 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-416

TI-2025-23774 CVE-2025-32710 · GHSA-v89x-hh3f-24gf

LOW 39

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01084 Published 2025-06-10 Fixed in 6.1.7601.27729, 6.0.6003.23317 +7 CWE-362

TI-2025-30348 CVE-2025-47955 · GHSA-9h9j-567f-gg4h

LOW 38

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00909 Published 2025-06-10 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-269