Detections
Analytics
KB5062561: Windows 10 LTS 1507 Security Update (July 2025)
high Nessus Plugin ID 241551
Language:
Synopsis
The remote Windows host is affected by multiple vulnerabilities.Description
The remote Windows host is missing security update 5062561. It is, therefore, affected by multiple vulnerabilities- Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
(CVE-2025-49659)
- Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. (CVE-2025-48820)
- Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally. (CVE-2025-47985)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply Security Update 5062561See Also
Plugin Details
Severity: High
ID: 241551
File Name: smb_nt_ms25_jul_5062561.nasl
Version: 1.2
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 7/8/2025
Updated: 7/11/2025
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.0
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2025-49659
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows_10_1507
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 7/8/2025
Vulnerability Publication Date: 7/8/2025
Reference Information
CVE: CVE-2025-47159, CVE-2025-47971, CVE-2025-47972, CVE-2025-47973, CVE-2025-47975, CVE-2025-47976, CVE-2025-47980, CVE-2025-47981, CVE-2025-47984, CVE-2025-47985, CVE-2025-47986, CVE-2025-47987, CVE-2025-47996, CVE-2025-48001, CVE-2025-48800, CVE-2025-48803, CVE-2025-48804, CVE-2025-48805, CVE-2025-48806, CVE-2025-48808, CVE-2025-48811, CVE-2025-48815, CVE-2025-48816, CVE-2025-48817, CVE-2025-48818, CVE-2025-48819, CVE-2025-48820, CVE-2025-48821, CVE-2025-48823, CVE-2025-49658, CVE-2025-49659, CVE-2025-49660, CVE-2025-49661, CVE-2025-49664, CVE-2025-49665, CVE-2025-49667, CVE-2025-49675, CVE-2025-49678, CVE-2025-49679, CVE-2025-49680, CVE-2025-49683, CVE-2025-49684, CVE-2025-49686, CVE-2025-49687, CVE-2025-49689, CVE-2025-49691, CVE-2025-49721, CVE-2025-49722, CVE-2025-49727, CVE-2025-49730, CVE-2025-49732, CVE-2025-49740, CVE-2025-49742, CVE-2025-49744, CVE-2025-49760