Vulnerabilidades do Microsoft Windows Server 2025

Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

NTLM Hash Disclosure Spoofing Vulnerability