The remote Windows host is missing security update 5053627. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5053627: Windows Server 2008 R2 Security Update (March 2025)

high Nessus Plugin ID 232608

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Apr 11, 2025, 1:33 AM IAVM reference Plugin Feed: 202504110133
Version 1.3 Apr 4, 2025, 7:32 AM Logic Changes (better version check) Plugin Feed: 202504040732
Version 1.2 Mar 15, 2025, 2:36 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202503150236
Version 1.1 Mar 11, 2025, 9:10 PM New Plugin Feed: 202503112110