Linked CVE review

Deploy Microsoft ESU security update KB5063888

Linked CVEs: 34
Confirmed exploited: 0
PoC or lab evidence: 2
Maximum CVSS: 9.8

Evidence is kept separate

Confirmed exploitation, public exploit material, EPSS probability and CVSS severity answer different questions. “No confirmation recorded” means the checked sources do not currently confirm exploitation. It is not proof that exploitation has not occurred.

34 of 34 linked CVEs shown

Confirmed exploitedCVSS above 9.0

CVE and description	Severity	Exploit reality	Forecast and access	Remediation
CVE-2025-50154 PoC or lab evidence Microsoft Windows File Explorer Spoofing Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 30.2% · 98.2th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysMedium technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53149 PoC or lab evidence Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 0.71% · 52.3th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53766 Critical technical severity GDI+ Remote Code Execution Vulnerability Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.	9.8 · CVSS 3.1 · CriticalSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 8.03% · 94.6th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · NONE user interaction	Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53778 Elevated EPSS forecast Windows NTLM Elevation of Privilege Vulnerability Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 47.6% · 98.8th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53143 Scheduled assessment Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 8.09% · 94.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53144 Scheduled assessment Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 7.60% · 94.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53145 Scheduled assessment Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 7.60% · 94.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50177 Scheduled assessment Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.	8.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 4.37% · 91.0th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53720 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.	8.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.95% · 60.0th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50163 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.94% · 59.6th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50160 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.	8.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.90% · 58.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50162 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.	8.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.90% · 58.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50164 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.	8.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.90% · 58.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50161 Scheduled assessment Win32k Elevation of Privilege Vulnerability Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.	7.3 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.59% · 46.4th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50173 Scheduled assessment Windows Installer Elevation of Privilege Vulnerability Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.50% · 40.8th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53147 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.45% · 37.1th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53141 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.44% · 36.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53154 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.44% · 36.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53132 Scheduled assessment Win32k Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.42% · 33.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53137 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.39% · 30.7th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50158 Scheduled assessment Windows NTFS Information Disclosure Vulnerability Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.38% · 29.6th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53718 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53140 Scheduled assessment Windows Kernel Transaction Manager Elevation of Privilege Vulnerability Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.36% · 27.4th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53134 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.32% · 22.8th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-49762 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.27% · 18.2th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50166 Scheduled assessment Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.37% · 71.0th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53719 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.29% · 69.3th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50156 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.21% · 67.6th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-50157 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.19% · 67.0th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53138 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.19% · 67.0th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53148 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.19% · 66.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53153 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.	5.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.19% · 67.0th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-53136 Scheduled assessment NT OS Kernel Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.91% · 58.7th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-49743 Scheduled assessment Windows Graphics Component Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.	6.7 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.52% · 42.5th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.