✕
Request a Demo
Rewterz
Critical Apache NiFi Vulnerability Leaks MongoDB Authentication Details
March 14, 2025
Rewterz
Mirai Botnet aka Katana – Active IOCs
March 15, 2025

Multiple Microsoft Windows Vulnerabilities

Severity

High

Analysis Summary

CVE-2025-24035 CVSS:8.1

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2025-24045 CVSS:8.1

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Impact

  • Code Execution

Indicators of Compromise

CVE

  • CVE-2025-24035

  • CVE-2025-24045

Affected Vendors

  • Microsoft

Affected Products

  • Microsoft Windows 10 Version 1809 - 10.0.17763.0
  • Microsoft Windows Server 2019 - 10.0.17763.0
  • Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
  • Microsoft Windows 10 Version 22H2 - 10.0.19045.0
  • Microsoft Windows Server 2025 (Server Core installation) - 10.0.26100.0
  • Microsoft Windows 11 version 22H3 - 10.0.22631.0
  • Microsoft Windows Server 2012 R2 - 6.3.9600.0
  • Microsoft Windows Server 2012 R2 (Server Core installation) - 6.3.9600.0
  • Microsoft Windows 11 Version 23H2 - 10.0.22631.0
  • Microsoft Windows Server 2008 Service Pack 2 - 6.0.6003.0
  • Microsoft Windows Server 23H2 Edition (Server Core installation) - 10.0.25398.0- 10.0.25398.0

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-24035

CVE-2025-24045