KLA82399 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 08 Apr 2025 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 109 Views

Multiple vulnerabilities in Microsoft Products allow code execution, privilege elevation, and denial of service.

Reporter	Title	Published	Views	Family All 266
GithubExploit	exploits	25 May 202601:12	–	githubexploit
Information Security Automation	May “In the Trend of VM” (#15): vulnerabilities in Microsoft Windows and the Erlang/OTP framework	21 May 202513:22	–	avleonov
Information Security Automation	April Microsoft Patch Tuesday	10 Apr 202522:59	–	avleonov
Information Security Automation	About Elevation of Privilege – Windows Process Activation (CVE-2025-21204) vulnerability	29 Apr 202521:04	–	avleonov
BDU FSTEC	The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Graphics component in Windows operating systems allows attackers to elevate their privileges to a system-level level.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges	10 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a perpetrator to cause a service failure.	10 Apr 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27487
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29810
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26637
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26670
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27733
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21205
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26663
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27478
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27737
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27732

30 Sep 2026 00:00Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.1105

SSVC

microsoft vulnerabilities remote code execution elevation of privilege security bypass denial of service.