TencentOS Server 3: .NET 6.0 (TSSA-2023:0179)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0179 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Microsoft Patch Tuesday, November 2025 Security Update Review

Microsoft released its November Patch Tuesday Security Updates. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for November 2025 This month's release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month's update...

CVE-2025-60718 Windows Administrator Protection Elevation of Privilege Vulnerability

...

CVE-2025-60718 Windows Administrator Protection Elevation of Privilege Vulnerability

...

CVE-2025-60718

CVE-2025-60718 is a Windows Administrator Protection elevation-of-privilege flaw caused by an untrusted search path. Affected software is Windows 11 (24H2 and 25H2); base CVSS v3.1 7.8 (Local, Privilege Escalation, high impact to confidentiality, integrity, and availability). Microsoft advises ap...

CVE-2025-60717 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

...

CVE-2025-60716 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-60713 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2025-59514

Technical details about CVE-2025-59514 are not provided in the supplied documents. No affected product versions, root cause, or remediation are specified here. Monitor for updates from official sources for confirmation and fixes.

CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability

...

CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-60704 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2025-60704 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2025-60704

Technical details about CVE-2025-60704 are not publicly provided in the supplied Connected Documents. The initial description notes a Kerberos cryptographic step missing that could enable network-based privilege elevation, but no vendor/version/impact specifics are disclosed here. Monitor for upd...

CVE-2025-60703 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59511 Windows WLAN Service Elevation of Privilege Vulnerability

...

CVE-2025-59508 Windows Speech Recognition Elevation of Privilege Vulnerability

...

CVE-2025-59506 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability

...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...