Summary
Ein entfernter anonymer Angreifer oder ein lokaler Angreifer kann mehrere Schwachstellen in Microsoft Windows ausnutzen, um Spoofing-Angriffe durchzuführen, Root-Rechte zu erlangen und beliebigen Code auszuführen.
Product
Windows ist ein Betriebssystem von Microsoft.
Vulnerabilities 3
-
High 7.8
Windows MBT Transport Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Storage-based Management Service Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.
-
Medium 5.3
Windows Certificate Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2025-08-21
https://msrc.microsoft.com/update-guide/
-
Microsoft CVE-2025-55229 vom 2025-08-21
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55229
-
Microsoft CVE-2025-55230 vom 2025-08-21
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55230
-
Microsoft CVE-2025-55231 vom 2025-08-21
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55231