Hotfix update for Exchange Server 2019 CU15: April 18, 2025 (KB5050672)

Hotfix update for Exchange Server 2019 CU15: April 18, 2025 KB5050672 Hotfix update for Microsoft Exchange Server 2019 CU15 was released on April 18, 2025. It includes fixes for non-security issues and introduces new features. These fixes and features will also be included in later cumulative...

August 12, 2025—Hotpatch KB5063812 (OS Build 20348.3989)

None None...

Description of the security update for Excel 2016: August 12, 2025 (KB5002758)

Description of the security update for Excel 2016: August 12, 2025 KB5002758 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

KLA86588 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Web Deploy can be exploited remotely to execute arbitrary code. 2...

KLA86590 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2025-53727 CVE-2025-49758 CVE-2025-47954 CVE-2025-49759 CVE-2025-24999 Related products Microsoft-SQL-Server Microsoft-Azure CVE list...

KLA86591 PE vulnerability in Microsoft Open Source Software

An elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53788 Related products Microsoft-Windows CVE list CVE-2025-53788 high Solution Install necessary updates from the KB...

KB5063878: Windows 11 Version 24H2 / Windows Server 2025 Security Update (August 2025)

The remote Windows host is missing security update 5063878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVE-2025-53766 - Missing synchronization in Windows Hyper-V allows an...

About Elevation of Privilege – Windows Update Service (CVE-2025-48799) vulnerability

About Elevation of Privilege - Windows Update Service CVE-2025-48799 vulnerability. This vulnerability is from the July Microsoft Patch Tuesday. Improper link resolution before file access 'link following' in the Windows Update Service allows an authorized attacker to elevate privileges to "NT...

.NET 8.0 Update - August 5, 2025 (KB5064838)

.NET 8.0 Update - August 5, 2025 KB5064838 .NET 8.0 has been refreshed with the latest update as of August 5, 2025. This update contains non-security fixes. See the release notes for details about updated packages..NET 8.0 servicing updates are upgrades. The latest servicing update for 8.0 will...

July 22, 2025—KB5062660 (OS Build 26100.4770) Preview

July 22, 2025—KB5062660 OS Build 26100.4770 Preview Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for t...

Important: Red Hat Security Advisory: OpenJDK 8u462 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

July Microsoft Patch Tuesday

July Microsoft Patch Tuesday. A total of 152 vulnerabilities - twice as many as in June. Of these, 15 vulnerabilities were added between the June and July MSPT. One vulnerability is exploited in the wild: Memory Corruption - Chromium CVE-2025-6554 One vulnerability has an exploit available on...

July 13, 2025—KB5064489 (OS Build 26100.4656) Out-of-band

July 13, 2025—KB5064489 OS Build 26100.4656 Out-of-band Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices f...

CVE-2025-48799

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows operating system update service allows a hacker to elevate their privileges to a system level.

The vulnerability of the Windows Operating System Update Service lies in the improper handling of symbolic links during file access. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level by performing operations such as deleting, moving, or renami...

CVE-2025-48799

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48799

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

2025-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5062554)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability

...

CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability

...