External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

The remote Windows host is missing security update 5053887. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053603. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053599. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053596. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053598. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053606. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053602. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053594. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053627. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053618. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053886. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232622	KB5053887: Windows Server 2012 R2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232621	KB5053603: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232620	KB5053599: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232617	KB5053596: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232616	KB5053598: Windows 11 Version 24H2 / Windows Server 2025 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232615	KB5053606: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232613	KB5053602: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232612	KB5053594: Windows 10 Version 1607 / Windows Server 2016 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232608	KB5053627: Windows Server 2008 R2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232607	KB5053618: Windows 10 LTS 1507 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232606	KB5053886: Windows Server 2012 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2025-24054

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high