July 1, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
New Campaign Targets Exposed Fortinet Firewalls with Zero-Day Exploit – Active IOCs
January 28, 2025Multiple Fortinet Products Vulnerabilities
January 28, 2025New Campaign Targets Exposed Fortinet Firewalls with Zero-Day Exploit – Active IOCs
January 28, 2025Multiple Fortinet Products Vulnerabilities
January 28, 2025
Severity
High
Analysis Summary
CVE-2025-21250 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21233 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21240 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21238 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21248 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21335 CVSS:7.8
Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by an error in the Hyper-V NT Kernel Integration VSP component.
CVE-2025-21223 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website
CVE-2025-21246 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21245 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
CVE-2025-21236 CVSS:8.8
Microsoft Windows Telephony Service could allow a remote attacker to execute arbitrary code on the system when visiting a specially crafted Website.
Impact
- Code Execution
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-21250
CVE-2025-21233
CVE-2025-21240
CVE-2025-21238
CVE-2025-21248
CVE-2025-21335
CVE-2025-21223
CVE-2025-21246
CVE-2025-21245
CVE-2025-21236
Affected Vendors
- Microsoft
Affected Products
- Microsoft Windows 10 Version 1809 - 10.0.17763.0
- Microsoft Windows Server 2019 - 10.0.17763.0
- Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
- Microsoft Windows Server 2022 - 10.0.20348.0
- Microsoft Windows 10 Version 22H2 - 10.0.19045.0
- Microsoft Windows Server 2025 (Server Core installation) - 10.0.26100.0
- Microsoft Windows 11 version 22H3 - 10.0.22631.0
- Microsoft Windows 11 Version 23H2 - 10.0.22631.0
- Microsoft Windows Server 2016 - 10.0.14393.0
- Microsoft Windows Server 2016 (Server Core installation) - 10.0.14393.0
- Microsoft Windows 10 Version 1607 - 10.0.14393.0
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.