Kwetsbaarheden verholpen in Microsoft Windows

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

- Denial-of-Servie (DoS)
- Verkrijgen van verhoogde rechten
- Omzeilen van beveiligingsmaatregel
- Spoofing
- Uitvoer van willekeurige code (Gebruikersrechten)

Van de kwetsbaarheden met kenmerk CVE-2025-21391 en CVE-2025-21418 meldt Microsoft informatie te hebben dat deze beperkt zijn misbruikt. Deze kwetsbaarheden bevinden zich respectievelijk in Windows Storage en WinSOCK. Succesvol misbruik vereist wel dat de kwaadwillende lokale toegang heeft tot het kwetsbare systeem.

Van de kwetsbaarheid met kenmerk CVE-2025-21377 geeft Microsoft aan informatie te hebben dat deze de aandacht heeft van onderzoekers, maar er is (nog) geen publieke Proof-of-Concept (PoC) of exploit bekend. Deze kwetsbaarheid bevindt zich in de wijze waarop omgegaan wordt met NTLMv2.

```
Windows Disk Cleanup Tool:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21420 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Telephony Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21201 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Remote Desktop Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21349 | 6.80 | <Vertaal: Tampering> |
|----------------|------|-------------------------------------|

Microsoft Digest Authentication:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21368 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21369 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Internet Connection Sharing (ICS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21352 | 6.50 | Denial-of-Service |
| CVE-2025-21212 | 6.50 | Denial-of-Service |
| CVE-2025-21216 | 6.50 | Denial-of-Service |
| CVE-2025-21254 | 6.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows NTLM:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21377 | 6.50 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Windows DHCP Client:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21179 | 4.80 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Ancillary Function Driver for WinSock:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21418 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Kernel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21359 | 7.80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|

Windows Win32 Kernel Subsystem:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21367 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Update Stack:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21347 | 6.00 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Installer:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21373 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Setup Files Cleanup:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21419 | 7.10 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Kerberos:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21350 | 5.90 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows Routing and Remote Access Service (RRAS):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21208 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21410 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Microsoft Streaming Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21375 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows CoreMessaging:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21358 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2025-21184 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Resilient File System (ReFS) Deduplication Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21182 | 7.40 | Verkrijgen van verhoogde rechten |
| CVE-2025-21183 | 7.40 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows DHCP Server:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21379 | 7.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows LDAP - Lightweight Directory Access Protocol:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21376 | 8.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Telephony Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21406 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21407 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21190 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21200 | 8.80 | Uitvoeren van willekeurige code |
| CVE-2025-21371 | 8.80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Windows Message Queuing:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21181 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|

Windows DWM Core Library:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21414 | 7.00 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Windows:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21337 | 3.30 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Windows Storage:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21391 | 7.10 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Active Directory Domain Services:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-21351 | 7.50 | Denial-of-Service |
|----------------|------|-------------------------------------|
```

Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:

https://portal.msrc.microsoft.com/en-us/security-guidance