April 8, 2025—KB5055518 (OS Builds 19044.5737 and 19045.5737) - EXPIRED

None None...

April 9, 2025—KB5055547 (OS Build 10240.20979) - EXPIRED

None None...

Microsoft Windows Digital Media 资源管理错误漏洞

Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Digital Media. An attacker could...

PT-2025-15460 · Aruba · Aos-8 Instant +1

Name of the Vulnerable Software and Affected Versions: AOS-8 Instant affected versions not specified AOS-10 AP versions up to 8.10.0.15 AOS-10 AP versions up to 8.12.0.3 AOS-10 AP versions up to 10.4.1.5 AOS-10 AP versions up to 10.7.0.1 Description: A vulnerability in a system binary could allow...

PT-2025-15471

Name of the Vulnerable Software and Affected Versions: AOS-10 GW versions prior to 10.7.1.0 AOS-8 Controller/Mobility Conductor versions prior to 8.12.0.3 Description: The issue is related to authenticated command injection vulnerabilities in the web-based management interface of the affected...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. The following products and versions are affected:Windows Server 2025,Windows Server 2025 Server Core...

PT-2025-15470

Name of the Vulnerable Software and Affected Versions: AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description: Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8...

PT-2025-15472

Name of the Vulnerable Software and Affected Versions: AOS-10 GW versions prior to 10.7.1.0 AOS-8 Controller/Mobility Conductor versions prior to 8.10.0.15 and 8.12.0.3 Description: A vulnerability in the Captive Portal could allow a remote attacker to conduct a reflected cross-site scripting XSS...

KB5055518: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (April 2025)

The remote Windows host is missing security update 5055518. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

KB5055661: Servicing stack update for Windows 10, version 1607 and Server 2016: April 8, 2025

None None...

KB5055521: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2025)

The remote Windows host is missing security update 5055521. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

Microsoft Windows Defender Application Control（WDAC） 访问控制错误漏洞

Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. An access control error vulnerability exists in Microsoft...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

PT-2025-15473

Name of the Vulnerable Software and Affected Versions: AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description: Multiple vulnerabilities exist in the web-based management interface of the affected devices. Successful exploitation o...

PT-2025-15461 · Aruba · Aos-8 Instant +1

Name of the Vulnerable Software and Affected Versions: AOS-8 Instant versions prior to the fixed version AOS-10 AP versions prior to the fixed version Description: A vulnerability in the file creation process on the command line interface could allow an authenticated remote attacker to perform...

KB5055519: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2025)

The remote Windows host is missing security update 5055519. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

April 8, 2025-KB5055683 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

Microsoft Windows TCP/IP 安全漏洞

Microsoft Windows TCP/IP is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker exploiting this vulnerability could remotely execute code. The following products and editions...

Microsoft Windows NTFS 缓冲区错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Windows Subsystem for Linux（WSL） 缓冲区错误漏洞

Microsoft Windows Subsystem for Linux WSL is a Linux subsystem for Windows, a compatibility layer capable of running native Linux binary executables ELF format from Microsoft. A buffer error vulnerability exists in Microsoft Windows Subsystem for Linux WSL. An attacker could exploit this...