KLA80109 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 11 Feb 2025 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 16 Views

Multiple vulnerabilities in Microsoft Products allow exploitation for code execution, privilege escalation, and DOS.

Reporter	Title	Published	Views	Family All 324
GithubExploit	Exploit for Link Following in Microsoft	12 Jun 202517:25	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	17 Feb 202508:59	–	githubexploit
ATTACKERKB	CVE-2025-21418	11 Feb 202500:00	–	attackerkb
Information Security Automation	February Microsoft Patch Tuesday	12 Feb 202522:01	–	avleonov
Information Security Automation	March episode “In the Trend of VM” (#13): vulnerabilities of Microsoft, PAN-OS, СommuniGate and who should patch hosts with deployed application	22 Apr 202512:51	–	avleonov
BDU FSTEC	The vulnerability of the driver for auxiliary functions of the Winsock application programming interface on Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.	12 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Digest Authentication (wDigest) authentication mechanism in Windows operating systems allows a perpetrator to execute arbitrary code.	13 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges	13 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.	13 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s kernel, which allows a hacker to bypass existing security restrictions	13 Feb 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21419
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21200
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21371
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21407
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21337
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21190
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21375
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21410
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21368
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21420

25 Mar 2025 00:00Current

10High risk

Vulners AI Score10

CVSS 3.18.8

EPSS0.21804

SSVC

microsoft products vulnerabilities elevation of privilege remote code execution security feature bypass denial of service spoofing vulnerabilities