Multiple critical vulnerabilities across a wide range of Microsoft Windows and Server products, as well as Microsoft Exchange, allow attackers to execute arbitrary code, escalate privileges, cause denial of service, disclose information, manipulate files, perform cross-site scripting, and bypass security measures. The article does not provide specific CVE identifiers, CVSS scores, exact affected version ranges, fixed version numbers, or workarounds.
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.