An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

The remote Windows host is missing security update 5061010. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060842 or Hot Patch 5060841. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Missing release of memory after effective lifetime in Windows Cryptographic Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-29828)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060533. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060526 or Hot Patch 5060525. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Missing release of memory after effective lifetime in Windows Cryptographic Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-29828)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060998. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060531. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060999. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Missing release of memory after effective lifetime in Windows Cryptographic Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-29828)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5061059. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5061018. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
    (CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5060118. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized     attacker to execute code over a network. (CVE-2025-33066)

  - Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
    (CVE-2025-33073)

  - Missing release of memory after effective lifetime in Windows Cryptographic Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-29828)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
238092	KB5061010: Windows 10 Version 1607 / Windows Server 2016 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238090	KB5060842: Windows 11 Version 24H2 / Windows Server 2025 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238084	KB5060533: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238083	KB5060526: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238081	KB5060998: Windows 10 LTS 1507 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238080	KB5060531: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238079	KB5060999: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238077	KB5061059: Windows Server 2012 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238075	KB5061018: Windows Server 2012 R2 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high
238074	KB5060118: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (June 2025)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2025-3052

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high