The Update BureauVulnerabilities fixed
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2025-24990
Exploited
Windows Agere Modem Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
CVE-2025-59230
Exploited
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
CVE-2025-47827
Exploited
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11
|
Important | 4.6 |
|
Microsoft Graphics Component Elevation of Privilege Vulnerability
|
Critical | 9.9 |
|
MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability
|
Critical | 4.0 |
|
Windows Speech Runtime Elevation of Privilege Vulnerability
|
Important | 8.8 |
|
Windows Speech Runtime Elevation of Privilege Vulnerability
|
Important | 8.8 |
|
Remote Desktop Client Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows URL Parsing Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Agere Modem Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Kernel Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Digital Media Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Digital Media Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Xbox IStorageService Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Hyper-V Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Device Association Broker Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Authentication Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cryptographic Services Information Disclosure Vulnerability
|
Important | 7.8 |
|
Microsoft DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Bluetooth Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Kernel Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Storport.sys Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Kernel Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Health and Optimized Experiences Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Microsoft DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Authentication Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Authentication Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Authentication Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Hello Security Feature Bypass Vulnerability
|
Important | 7.7 |
|
DirectX Graphics Kernel Denial of Service Vulnerability
|
Important | 7.7 |
|
Data Sharing Service Spoofing Vulnerability
|
Important | 7.7 |
|
Windows Cryptographic Services Security Feature Bypass Vulnerability
|
Important | 7.5 |
|
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows SMB Server Elevation of Privilege Vulnerability
|
Important | 7.5 |
|
Microsoft Brokering File System Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Windows NTFS Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Windows Kernel Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Microsoft Brokering File System Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
|
Important | 7.4 |
|
PowerShell Elevation of Privilege Vulnerability
|
Important | 7.3 |
|
Windows MapUrlToZone Information Disclosure Vulnerability
|
Important | 7.1 |
|
Windows Device Association Broker Service Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
MITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Remote Desktop Protocol Security Feature Bypass
|
Important | 7.0 |
|
DirectX Graphics Kernel Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Desktop Window Manager Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows COM+ Event System Service Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Windows Management Services Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Kernel Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Graphics Component Denial of Service Vulnerability
|
Important | 7.0 |
|
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Remote Desktop Services Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
|
Important | 7.0 |
|
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
|
Important | 6.5 |
|
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
|
Important | 6.5 |
|
Windows Local Session Manager (LSM) Denial of Service Vulnerability
|
Important | 6.5 |
|
Microsoft Windows File Explorer Spoofing Vulnerability
|
Important | 6.5 |
|
NTLM Hash Disclosure Spoofing Vulnerability
|
Important | 6.5 |
|
Microsoft Windows File Explorer Spoofing Vulnerability
|
Important | 6.5 |
|
NTLM Hash Disclosure Spoofing Vulnerability
|
Important | 6.5 |
|
Windows Local Session Manager (LSM) Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Local Session Manager (LSM) Denial of Service Vulnerability
|
Important | 6.5 |
|
Virtual Secure Mode Spoofing Vulnerability
|
Important | 6.3 |
|
Windows Kernel Security Feature Bypass Vulnerability
|
Important | 6.2 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows BitLocker Security Feature Bypass Vulnerability
|
Important | 6.1 |
|
Windows Storage Management Provider Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows USB Video Class System Driver Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Kernel Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Search Service Denial of Service Vulnerability
|
Important | 5.5 |
|
Windows ETL Channel Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows State Repository API Server File Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Management Services Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Push Notification Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Push Notification Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Search Service Denial of Service Vulnerability
|
Important | 5.5 |
|
Windows License Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows License Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation
|
Important | 5.3 |
|
Windows Kernel Information Disclosure Vulnerability
|
Important | 5.1 |
|
Windows Search Service Denial of Service Vulnerability
|
Important | 5.0 |
|
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
|
Important | 4.7 |
|
Windows NTLM Spoofing Vulnerability
|
Important | 3.3 |
|
Windows SMB Client Tampering Vulnerability
|
Important | 3.1 |
|
Windows Taskbar Live Preview Information Disclosure Vulnerability
|
Important | 2.1 |