KLA78975 Multiple vulnerabilities in Microsoft Windows

🗓️ 14 Jan 2025 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 163 Views

Multiple vulnerabilities in Microsoft Windows can allow exploitation to gain privileges, execute code, and more.

Reporter	Title	Published	Views	Family All 206
BDU FSTEC	The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems allows a hacker to increase their privileges.	15 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to disclose protected information.	15 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Telephony Service in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to circumvent security restrictions.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cloud Files Mini Filter Driver for Microsoft Windows operating systems allows a hacker to increase their privileges.	16 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.	17 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Digital Media component of Windows operating systems, which allows a perpetrator to elevate their privileges to a system-level level	20 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to disclose sensitive information that is protected by this mechanism.	20 Jan 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21329
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21220
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21327
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21328
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21271
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21269
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21207
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21299
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21242
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21282

30 Sep 2026 00:00Current

8High risk

Vulners AI Score8

CVSS 3.17.8 - 8.8

EPSS0.04593

SSVC

microsoft windows vulnerabilities remote exploitation security feature bypass information disclosure elevation of privilege denial of service arbitrary code execution.