The remote Windows host is missing security update 5063899. It is, therefore, affected by multiple vulnerabilities

  - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
    (CVE-2025-53766)

  - Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent     network. (CVE-2025-49751)

  - Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft     Graphics Component allows an authorized attacker to elevate privileges locally. (CVE-2025-49743)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5063899: Windows Server version 23H2 Security Update (August 2025)

critical Nessus Plugin ID 249122

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Feb 7, 2026, 12:50 AM Plugin metadata (fixed script name and cpe) Plugin Feed: 202602070050
Version 1.4 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057
Version 1.3 Sep 17, 2025, 9:12 PM New Plugin Feed: 202509172112
Version 1.2 Aug 15, 2025, 7:38 PM New Plugin Feed: 202508151938
Version 1.1 Aug 13, 2025, 7:42 PM New Plugin Feed: 202508131942