Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

The remote Windows host is missing security update 5068779. It is, therefore, affected by multiple vulnerabilities

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.     (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information.     (CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)   
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508,     CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515,     CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707,     CVE-2025-60709, CVE-2025-60713, CVE-2025-60716, CVE-2025-60717,     CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215,     CVE-2025-62217, CVE-2025-62218, CVE-2025-62219     )

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5068787. It is, therefore, affected by multiple vulnerabilities

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.     (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)   
  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information.
    (CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)   
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508,     CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515,     CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707,     CVE-2025-60709, CVE-2025-60713, CVE-2025-60716, CVE-2025-60717,     CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215,     CVE-2025-62217)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5068865. It is, therefore, affected by multiple vulnerabilities

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2025-60724, CVE-2025-60715, CVE-2025-62452)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
  (CVE-2025-59505, CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-60703, CVE-2025-60705,   CVE-2025-60707, CVE-2025-60709, CVE-2025-60713, CVE-2025-60714, CVE-2025-60720, CVE-2025-60704,   CVE-2025-59506, CVE-2025-59507, CVE-2025-59508, CVE-2025-59515, CVE-2025-60716, CVE-2025-60717,   CVE-2025-60719, CVE-2025-62213, CVE-2025-62215, CVE-2025-62217, CVE-2025-62218, CVE-2025-62219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5068791. It is, therefore, affected by multiple vulnerabilities

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.     (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information.
    (CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508,     CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515,     CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707,     CVE-2025-60709, CVE-2025-60713, CVE-2025-60716, CVE-2025-60717,     CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215,     CVE-2025-62217)   


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5068861 or hotpatch 5068966. It is, therefore, affected by multiple vulnerabilities

  - Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker     to disclose information locally. (CVE-2025-62208, CVE-2025-62209)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-59505, CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-60703, CVE-2025-60705,     CVE-2025-60707, CVE-2025-60709, CVE-2025-60713, CVE-2025-60720, CVE-2025-60704, CVE-2025-59506,     CVE-2025-59507, CVE-2025-59508, CVE-2025-59515, CVE-2025-60716, CVE-2025-60717, CVE-2025-60719,     CVE-2025-62213, CVE-2025-62215, CVE-2025-62217 )   
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.     (CVE-2025-60724, CVE-2025-60715, CVE-2025-62452)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5068864. It is, therefore, affected by multiple vulnerabilities

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)   
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508,     CVE-2025-59512, CVE-2025-59514, CVE-2025-60703, CVE-2025-60704,     CVE-2025-60705, CVE-2025-60709, CVE-2025-60713, CVE-2025-60719,     CVE-2025-60720, CVE-2025-62213, CVE-2025-62217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
274792	KB5068779: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	high
274789	KB5068787: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	high
274785	KB5068865: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	high
274782	KB5068791: Windows 10 version 1809 / Windows Server 2019 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	high
274781	KB5068861: Windows 11 Version 24H2 / Windows Server 2025 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	high
274780	KB5068864: Windows 10 Version 1607 / Windows Server 2016 Security Update (November 2025)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2025-60708

medium

Tenable Plugins

high

high

high

high

high

critical