CVE-2025-59775

Server-Side Request Forgery SSRF vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes...

November 18, 2025—KB5072359 (OS Build 26100.7178) Out-of-band

None None...

2025-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5068864)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-11 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5068840)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

2025-11 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5068791)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Hyper-V 缓冲区错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive information. Th...

Microsoft Windows DirectX 资源管理错误漏洞

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows DirectX. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and...

KB5068864: Windows 10 Version 1607 / Windows Server 2016 Security Update (November 2025)

The remote Windows host is missing security update 5068864. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...

KB5068909: Windows Server 2008 Security Update (November 2025)

The remote Windows host is missing security update 5068909. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60715,...

KB5068907: Windows Server 2012 Security Update (November 2025)

The remote Windows host is missing security update 5068907. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows OLE. An attacker exploiting this vulnerability could execute code. The following products and editions are affected:Windows 10 Version...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate privileges. The...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows 日志信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A log information disclosure vulnerability exists in Microsoft Windows License Manager. An attacker could exploit this vulnerability to obtain sensitive information. The following products an...

KB5071813: Servicing stack update for Windows Server 2012: November 11, 2025

None None...

KB5068791: Windows 10 version 1809 / Windows Server 2019 Security Update (November 2025)

The remote Windows host is missing security update 5068791. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...

KB5068787: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (November 2025)

The remote Windows host is missing security update 5068787. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60714,...