Multiple vulnerabilities in Microsoft Products (ESU)

Description

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Windows SMB can be exploited remotely to obtain sensitive information.
2. A memory corruption vulnerability in Scripting Engine can be exploited remotely to execute arbitrary code.
3. A denial of service vulnerability in Windows Deployment Services can be exploited remotely to cause denial of service.
4. An information disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to obtain sensitive information.
5. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in NTFS can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Windows Installer can be exploited remotely to obtain sensitive information.
8. A denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to cause denial of service.
9. A remote code execution vulnerability in Windows Remote Desktop Services can be exploited remotely to execute arbitrary code.
10. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
11. An elevation of privilege vulnerability in Windows Kernel-Mode Driver can be exploited remotely to gain privileges.
12. A denial of service vulnerability in Windows Remote Desktop Gateway (RD Gateway) can be exploited remotely to cause denial of service.
13. An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
14. An information disclosure vulnerability in Windows Multiple UNC Provider Driver can be exploited remotely to obtain sensitive information.
15. An information disclosure vulnerability in Windows Remote Access Connection Manager can be exploited remotely to obtain sensitive information.
16. An elevation of privilege vulnerability in Kernel Streaming Service Driver can be exploited remotely to gain privileges.
17. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
18. A denial of service vulnerability in Active Directory Certificate Services (AD CS) can be exploited remotely to cause denial of service.
19. A remote code execution vulnerability in MS-EVEN RPC can be exploited remotely to execute arbitrary code.
20. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
21. A remote code execution vulnerability in Microsoft Virtual Machine Bus (VMBus) can be exploited remotely to execute arbitrary code.
22. A remote code execution vulnerability in Windows Media can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2025-29956

• CVE-2025-30397
• CVE-2025-29957
• CVE-2025-29961
• CVE-2025-32701
• CVE-2025-29959
• CVE-2025-29830
• CVE-2025-29836
• CVE-2025-29960
• CVE-2025-32707
• CVE-2025-29837
• CVE-2025-29954
• CVE-2025-29831
• CVE-2025-32709
• CVE-2025-27468
• CVE-2025-30394
• CVE-2025-29974
• CVE-2025-30385
• CVE-2025-29839
• CVE-2025-29835
• CVE-2025-24063
• CVE-2025-29967
• CVE-2025-29958
• CVE-2025-29832
• CVE-2025-32706
• CVE-2025-29968
• CVE-2025-29969
• CVE-2025-29966
• CVE-2025-30388
• CVE-2025-29833
• CVE-2025-29962

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

CVE list

• CVE-2025-24063
  critical
• CVE-2025-27468
  high
• CVE-2025-29830
  high
• CVE-2025-29831
  critical
• CVE-2025-29832
  high
• CVE-2025-29833
  high
• CVE-2025-29835
  high
• CVE-2025-29836
  high
• CVE-2025-29837
  high
• CVE-2025-29839
  warning
• CVE-2025-29954
  high
• CVE-2025-29956
  high
• CVE-2025-29957
  high
• CVE-2025-29958
  high
• CVE-2025-29959
  high
• CVE-2025-29960
  high
• CVE-2025-29961
  high
• CVE-2025-29962
  critical
• CVE-2025-29966
  critical
• CVE-2025-29967
  critical
• CVE-2025-29968
  high
• CVE-2025-29969
  critical
• CVE-2025-29974
  high
• CVE-2025-30385
  critical
• CVE-2025-30388
  critical
• CVE-2025-30394
  high
• CVE-2025-30397
  critical
• CVE-2025-32701
  critical
• CVE-2025-32706
  critical
• CVE-2025-32707
  critical
• CVE-2025-32709
  critical

KB list

• 5058380
• 5058403
• 5058430
• 5058454
• 5058451
• 5058429
• 5058449

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com