KLA86901 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

CVE-2025-55231: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an unauthorized attacker to execute code over a network...

CVE-2025-53156 Windows Storage Port Driver Information Disclosure Vulnerability

...

Windows Storage Port Driver Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally...

Microsoft Windows Storage Port Driver 信息泄露漏洞

The Microsoft Windows Storage Port Driver is a system-provided storage port driver from Microsoft USA that is particularly suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. An information disclosure vulnerability exists in the Microsoft Windows...

Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation

Cybersecurity researchers have presented new findings related to a now-patched security issue in Microsoft's Windows Remote Procedure Call RPC communication protocol that could be abused by an attacker to conduct spoofing attacks and impersonate a known server. The vulnerability, tracked as...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

CVE-2025-47982

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

The vulnerability of Windows operating system storage devices, which allows attackers to perform spoofing attacks

The vulnerability of Windows operating system storage devices is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

CVE-2025-47982

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-47982

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-49684 Windows Storage Port Driver Information Disclosure Vulnerability

...

CVE-2025-49684 Windows Storage Port Driver Information Disclosure Vulnerability

...

CVE-2025-47982

CVE-2025-47982 affects Windows Storage VSP Driver. The root cause is improper input validation, enabling a locally authenticated attacker to elevate privileges. CVSS v3.1 base score 7.8 (HIGH) with local, low-complexity, no user interaction required; impact includes high confidentiality, integrit...

CVE-2025-47982 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-47982 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-49760 Windows Storage Spoofing Vulnerability

...

CVE-2025-49760

Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.