Microsoft update

KB5066840

IE Cumulative

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.000
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2012 1.000
Windows Server 2012 (Server Core installation) 1.000
Windows Server 2012 R2 1.000
Windows Server 2012 R2 (Server Core installation) 1.000

Fixes 3 records

TI-2025-36870 CVE-2025-59295 · GHSA-wvfp-x5jq-9684

Windows URL Parsing Remote Code Execution Vulnerability

MEDIUM 44

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.019 Published 2025-10-14 Fixed in 10.0.10240.21161, 10.0.14393.8519 +13 CWE-122

TI-2025-36799 CVE-2025-59208 · GHSA-99mj-3f54-2jcc

Windows MapUrlToZone Information Disclosure Vulnerability

LOW 32

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00499 Published 2025-10-14 Fixed in 10.0.10240.21161, 10.0.14393.8519 +13 CWE-125

TI-2025-36397 CVE-2025-58739 · GHSA-prw2-fqj4-qmh7

Microsoft Windows File Explorer Spoofing Vulnerability

LOW 30

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00818 Published 2025-10-14 Fixed in 10.0.10240.21161, 10.0.14393.8519 +13 CWE-200