March 27, 2025-KB5054979 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2

None None...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The followin...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 1809 for...

Microsoft Active Directory Domain Services 资源管理错误漏洞

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA used to manage and organize resources, users, computers, and other security objects in a network. A resource management error vulnerability exists in Microsoft Active Directory Domain Services. An attacker...

Microsoft Windows DHCP Client Server 资源管理错误漏洞

Microsoft Windows DHCP Client Server is a core service from Microsoft Corporation USA that is used to automatically obtain network configuration information. A resource management error vulnerability exists in Microsoft Windows DHCP Client Server. An attacker exploiting this vulnerability could...

Microsoft Windows Resilient File System 资源管理错误漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows Resilient File System 资源管理错误漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows DHCP Client Server 缓冲区错误漏洞

Microsoft Windows DHCP Client Server is a core service from Microsoft Corporation USA that is used to automatically obtain network configuration information. A buffer error vulnerability exists in Microsoft Windows DHCP Client Server. An attacker could exploit this vulnerability to cause a denial...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 1809 for...

January 28, 2025-KB5050577 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2

None None...

Microsoft Windows Secure Kernel Mode 安全漏洞

Microsoft Windows Secure Kernel Mode is a security feature from Microsoft Corporation USA that uses virtualization technology to enhance system security. A security vulnerability exists in Microsoft Windows Secure Kernel Mode that stems from the presence of an elevation of privilege vulnerability...

KLA90885 PE vulnerability in Microsoft Products (ESU)

An elevation of privilege vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-21325 Exploitation Related products Microsoft-Windows Microsoft-Windows-10 Microsoft-Windows-11 CVE lis...

Microsoft Windows COM 资源管理错误漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A resource management error vulnerability exists in...

Microsoft Digest Authentication 安全漏洞

Microsoft Digest Authentication is a simple authentication mechanism from Microsoft USA. A security vulnerability exists in Microsoft Digest Authentication. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows 10 Version...

Microsoft MapUrlToZone 安全漏洞

Microsoft MapUrlToZone is a lightweight console application written in C++ by Microsoft Corporation USA. A security vulnerability exists in Microsoft MapUrlToZone. An attacker exploiting this vulnerability could bypass certain functionality. The following products and versions are affected: Windo...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to elevate privileges. The following...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Web Threat Defense User Service. An attacker could exploit the vulnerability to obtain sensitive information. The following products a...

Microsoft Windows Kernel 日志信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows Kernel Memory. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

Microsoft Windows Virtual Trusted Platform Module 输入验证错误漏洞

Microsoft Windows Virtual Trusted Platform Module is a virtualization technology from Microsoft Corporation USA that provides the same security features in a virtual machine as a physical TPM for security operations such as encryption, authentication, and integrity verification. An input validati...