Analysis Summary

CVE-2025-30394 CVSS:5.9

Microsoft Windows is vulnerable to a denial of service, caused by sensitive data storage in improperly locked memory in Remote Desktop Gateway Service.

CVE-2025-27468 CVSS:7

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper privilege management in the Kernel-Mode Driver.

CVE-2025-29969 CVSS:7.5

Microsoft Windows could allow a remote authenticated attacker to execute arbitrary code on the system, caused by time-of-check time-of-use (toctou) race condition in Fundamentals.

CVE-2025-29966 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by heap-based buffer overflow in Remote Desktop.

CVE-2025-29964 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by heap-based buffer overflow in Media.

CVE-2025-29960 CVSS:6.5

Microsoft Windows could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in Routing and Remote Access Service (RRAS).

CVE-2025-29959 CVSS:6.5

Microsoft Windows could allow a remote attacker to obtain sensitive information, caused by use of uninitialized resource in Routing and Remote Access Service (RRAS).

Impact

• Denial of Service
• Code Execution
• Privilege Escalation
• Information Disclosure

Indicators of Compromise

CVE

• CVE-2025-30394

• CVE-2025-27468

• CVE-2025-29969

• CVE-2025-29966

• CVE-2025-29964

• CVE-2025-29960

• CVE-2025-29959

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-30394

CVE-2025-27468

CVE-2025-29969

CVE-2025-29966

CVE-2025-29964

CVE-2025-29960

CVE-2025-29959