Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21907 | Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability | 7.5 | 33% | PoC ×4 | |
CVE-2025-48003+3 related CVEs | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack | 6.8 | <1% | ||
| CVE-2025-53791 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network | 4.7 | <1% | ||
CVE-2025-55234+3 related CVEs | SMB Relay Elevation of Privilege in Microsoft Windows SMB Server | 9.8 group max | 20% | ||
| CVE-2025-54914 | Azure Networking Elevation of Privilege Vulnerability | 9.8 | 2% | ||
| CVE-2025-55232 | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network | 9.8 | 2% |
From the original article
5 min read at thehackernews.com
Microsoft on Tuesday addressed a set of 80 security flaws in its software, including one vulnerability that has been disclosed as publicly known at the time of release. Of the 80 vulnerabilities, eight are rated Critical and 72 are rated Important in severity. None of the shortcomings has been exploited in the wild as a zero-day.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.