Lucene search
+L

CVE-2025-53779

๐Ÿ—“๏ธย 12 Aug 2025ย 17:10:40Reported byย microsoftTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ“ฐ๏ธย 14ย Media mentions๐Ÿ‘ย 201ย Views

CVE-2025-53779: Relative path traversal in Windows Kerberos enables privilege elevation by attacker.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Relative Path Traversal in Microsoft
24 Jul 202606:38
โ€“githubexploit
githubexploit
GithubExploit
BadSuccessor-PoC
17 Apr 202619:02
โ€“githubexploit
avleonov
Information Security Automation
August Microsoft Patch Tuesday
13 Aug 202522:04
โ€“avleonov
bdu_fstec
BDU FSTEC
Kerberos Privilege Escalation
28 Oct 202614:57
โ€“bdu_fstec
circl
Circl
CVE-2025-53779
12 Aug 202516:01
โ€“circl
cnnvd
CNNVD
Microsoft Windows Kerberos security vulnerabilities
12 Aug 202500:00
โ€“cnnvd
cvelist
Cvelist
CVE-2025-53779 Windows Kerberos Elevation of Privilege Vulnerability
12 Aug 202517:10
โ€“cvelist
euvd
EUVD
EUVD-2025-24284
3 Oct 202520:07
โ€“euvd
mskb
Microsoft KB
August 12, 2025โ€”KB5063878 (OS Build 26100.4946) for Windows
12 Aug 202507:00
โ€“mskb
mskb
Microsoft KB
August 12, 2025โ€”Hotpatch KB5064010 (OS Build 26100.4851) for Windows Server
12 Aug 202507:00
โ€“mskb
Rows per page
NVD
Vulners
CNA
Node
microsoftwindows_server_2025Range<10.0.26100.4851
[
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4946",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4946",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Action1corp

๐—ง๐—ผ๐—ฑ๐—ฎ๐˜†'๐˜€ ๐—ฃ๐—ฎ๐˜๐—ฐ๐—ต ๐—ง๐˜‚๐—ฒ๐˜€๐—ฑ๐—ฎ๐˜† ๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฒ๐˜„: Microsoft has addressed 107 vulnerabilities, one zero-day with PoC (CVE-2025-53779), 13 critical Third-party: actively exploited vulnerabilities in Google Chrome, Android, Apple, Cisco ISE, and Wing FTP Server, plus major third-party issues affecting Axis Communications, Dell ControlVault3, Nvidia, WordPress, and Sophos Firewall. Navigate to ๐—ฉ๐˜‚๐—น๐—ป๐—ฒ๐—ฟ๐—ฎ๐—ฏ๐—ถ๐—น๐—ถ๐˜๐˜† ๐——๐—ถ๐—ด๐—ฒ๐˜€๐˜ ๐—ณ๐—ฟ๐—ผ๐—บ ๐—”๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐Ÿญfor comprehensive summary updated in real-time >>https://t.co/t0z4Y33kYz ๐—ค๐˜‚๐—ถ๐—ฐ๐—ธ ๐˜€๐˜‚๐—บ๐—บ๐—ฎ๐—ฟ๐˜†: ๐—ช๐—ถ๐—ป๐—ฑ๐—ผ๐˜„๐˜€: 107 vulnerabilities, one zero-day with PoC (CVE-2025-53779), 13 critical ๐—š๐—ผ๐—ผ๐—ด๐—น๐—ฒ ๐—–๐—ต๐—ฟ๐—ผ๐—บ๐—ฒ: Actively exploited sandbox escape (CVE-2025-6558) ๐—”๐˜…๐—ถ๐˜€ ๐—–๐—ผ๐—บ๐—บ๐˜‚๐—ป๐—ถ๐—ฐ๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐˜€: Multiple flaws; over 6,500 exposed servers ๐——๐—ฒ๐—น๐—น ๐—–๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น๐—ฉ๐—ฎ๐˜‚๐—น๐˜๐Ÿฏ: โ€œReVaultโ€ firmware vulnerabilities ๐—ก๐˜ƒ๐—ถ๐—ฑ๐—ถ๐—ฎ ๐—ง๐—ฟ๐—ถ๐˜๐—ผ๐—ป ๐—œ๐—ป๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ป๐—ฐ๐—ฒ ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฟ: Chained flaws; AI model theft and manipulation possible ๐—”๐—ป๐—ฑ๐—ฟ๐—ผ๐—ถ๐—ฑ: Two actively exploited Qualcomm GPU vulnerabilities (CVE-2025-21479, CVE-2025-27038) ๐—”๐—ฝ๐—ฝ๐—น๐—ฒ ๐—ถ๐—ข๐—ฆ/๐—บ๐—ฎ๐—ฐ๐—ข๐—ฆ: Actively exploited zero-day (CVE-2025-6558); 13 WebKit flaws and multiple OS component fixes across all platforms ๐—ช๐—ผ๐—ฟ๐—ฑ๐—ฃ๐—ฟ๐—ฒ๐˜€๐˜€ ๐—ฃ๐—ผ๐˜€๐˜ ๐—ฆ๐— ๐—ง๐—ฃ ๐—ฃ๐—น๐˜‚๐—ด๐—ถ๐—ป: Improper access control (CVE-2025-24000); 200,000+ sites vulnerable ๐—ฆ๐—ผ๐—ฝ๐—ต๐—ผ๐˜€ ๐—™๐—ถ๐—ฟ๐—ฒ๐˜„๐—ฎ๐—น๐—น: Multiple RCEs (CVE-2025-6704, CVE-2025-7624, CVE-2025-7382) plus privilege escalation flaws (CVE-2024-13974, CVE-2024-13973) ๐—–๐—ถ๐˜€๐—ฐ๐—ผ ๐—œ๐—ฆ๐—˜& ๐—œ๐—ฆ๐—˜-๐—ฃ๐—œ๐—–: Critical unauthenticated RCE (CVE-2025-20337) plus previously disclosed CVE-2025-20281, CVE-2025-20282 now under active exploitation ๐—ช๐—ถ๐—ป๐—ด ๐—™๐—ง๐—ฃ ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฟ: Actively exploited null byte injection (CVE-2025-47812); 5,000+ exposed web interfaces ๐— ๐—ผ๐—ฟ๐—ฒ ๐—ฑ๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€: https://t.co/FvbWKdjs9r ๐—ฆ๐—ผ๐˜‚๐—ฟ๐—ฐ๐—ฒ๐˜€: - Action1 Vulnerability Digest>> https://t.co/FvbWKdjs9r - Microsoft Security Update Guide>>https://t.co/ShbdyyYumO #PatchTuesday #VulnerabilityManagement #ZeroDay #PatchManagement #Cybersecurity #InfoSec #EndpointSecurity #MicrosoftSecurity #SecurityUpdates #CVEs #ITOps #Action1

Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:38Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.2
EPSS0.02695
SSVC
201