The remote Windows host is missing security update 5053599. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5053599: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (March 2025)

high Nessus Plugin ID 232620

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Apr 11, 2025, 1:33 AM IAVM reference Plugin Feed: 202504110133
Version 1.2 Mar 15, 2025, 2:36 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202503150236
Version 1.1 Mar 11, 2025, 9:10 PM New Plugin Feed: 202503112110