Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-33070+1 related CVE | Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network | 8.1 group max | 7% | ||
CVE-2025-33053+1 related CVE | Remote Code Execution in Microsoft Windows Internet Shortcut Files (CVE-2025-33053) | 8.8 | 87% | KEVPoC ×3 | KEV |
| CVE-2025-33071 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network | 8.1 | 18% | ||
| CVE-2025-47966 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network | 9.8 | 1% |
From the original article
8 min read at thehackernews.com
Microsoft has released patches to fix 67 security flaws , including one zero-day bug in Web Distributed Authoring and Versioning (WebDAV) that it said has come under active exploitation in the wild. Of the 67 vulnerabilities, 11 are rated Critical and 56 are rated Important in severity. This includes 26 remote code execution flaws, 17 information disclosure flaws, and 14 privilege escalation flaws.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.