Microsoft update

KB5071504

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23666
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23666
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23666
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23666

Fixes 8 records

TI-2025-38769 CVE-2025-62549 · GHSA-qwrx-fp3h-w29g

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01318 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-822

TI-2025-38718 CVE-2025-62472 · GHSA-wjfc-4j3w-ccjw

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

MEDIUM 40

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02201 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-416

TI-2025-33943 CVE-2025-54100 · GHSA-9j88-g4wc-q6mc

PowerShell Remote Code Execution Vulnerability

MEDIUM 40

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02234 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-77

TI-2025-38717 CVE-2025-62470 · GHSA-36hm-h89f-cr4p

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 37

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00507 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-122

TI-2025-38703 CVE-2025-62455 · GHSA-8gm2-4q24-m56x

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 37

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00473 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +6 CWE-20

TI-2025-38788 CVE-2025-62571 · GHSA-5m4f-7cx9-pg4q

Windows Installer Elevation of Privilege Vulnerability

LOW 36

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00401 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-20

TI-2025-38713 CVE-2025-62466 · GHSA-6wqw-fv93-6j54

Windows Client-Side Caching Elevation of Privilege Vulnerability

LOW 36

Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00402 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-476

TI-2025-38719 CVE-2025-62473 · GHSA-j7mc-p6qr-w5w5

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

LOW 31

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01078 Published 2025-12-09 Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-126