通告编号:NS-2025-0037
| TAG： |
安全更新、Windows、Office、Visual Studio、SharePoint、Exchange Server |
| 漏洞危害： |
攻击者利用本次安全更新中的漏洞，可造成权限提升、远程代码执行等 |
| 版本： | 1.0 |
漏洞概述
8月13日，绿盟科技CERT监测到微软发布8月安全更新补丁，修复了111个安全问题，涉及Windows、Microsoft Office、Microsoft SQL Server、Visual Studio、Microsoft Exchange Server等广泛使用的产品，其中包括权限提升、远程代码执行等高危漏洞类型。
本月微软月度更新修复的漏洞中，严重程度为关键（Critical）的漏洞有17个，重要（Important）漏洞有91个，中危（Moderate）漏洞有2个。
请相关用户尽快更新补丁进行防护，完整漏洞列表请参考附录。
参考链接：
https://msrc.microsoft.com/update-guide/en-us/releaseNote/2025-Aug
SEE MORE →
2重点漏洞简述
根据产品流行度和漏洞重要性筛选出此次更新中包含影响较大的漏洞，请相关用户重点进行关注：
Windows图形组件远程代码执行漏洞（CVE-2025-50165）：
Windows图形组件中存在远程代码执行漏洞，由于Microsoft图形组件中不受信任的指针取消引用，未经身份验证的攻击者可通过特制的JPEG图像（可嵌入Office或其他文件中）在目标系统上远程执行代码。CVSS评分9.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-50165
Windows GDI远程执行代码漏洞（CVE-2025-53766）：
Windows GDI中存在远程代码执行漏洞，由于Windows GDI+中基于堆的缓冲区溢出，未经身份验证的攻击者可通过诱导用户下载并打开包含特制图元文件的文档来执行任意代码。CVSS评分9.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53766
Microsoft SharePoint远程执行代码漏洞（CVE-2025-49712）：
Microsoft SharePoint中存在远程执行代码漏洞，由于Microsoft Office SharePoint中不受信任数据的反序列化，经过身份验证的远程攻击者可以通过该漏洞执行任意代码。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-49712
Microsoft Word远程代码执行漏洞（CVE-2025-53733）：
Microsoft Word中存在远程执行代码漏洞。由于Microsoft Office Word中不正确的数字类型转换，未经身份验证的攻击者可以通过制作恶意的文件诱使用户打开或预览窗格，从而在用户上下文中执行任意代码。CVSS评分8.4。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53733
Windows NTLM权限提升漏洞（CVE-2025-53778）：
Windows NTLM中存在权限提升漏洞，由于Windows NTLM中的身份验证不当，经过身份验证的本地攻击者可以利用此漏洞获取系统SYSTEM权限。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53778
Microsoft 消息队列 (MSMQ) 远程代码执行漏洞（CVE-2025-50177）：
Microsoft 消息队列 (MSMQ) 中存在远程代码执行漏洞，由于Windows消息队列的释放后重用（Use-After-Free），未经身份验证的攻击者可通过向MSMQ服务器批量发送特制的 HTTP数据包进行竞争条件，从而在目标服务器实现远程执行代码。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-50177
Microsoft SQL Server权限提升漏洞（CVE-2025-24999）：
Microsoft SQL Server中存在权限提升漏洞，由于SQL Server的访问控制不当，经过身份验证的攻击者可通过网络获取目标系统的sysadmin权限。CVSS评分8.8。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24999
Azure门户权限提升漏洞（CVE-2025-53792）：
Azure门户中存在权限提升漏洞，由于Azure Windows虚拟机代理中的不当授权，未经身份验证的攻击者可通过网络提升权限。CVSS评分9.1。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53792
远程桌面欺骗漏洞（CVE-2025-50171）：
远程桌面中存在欺骗漏洞，由于远程桌面服务器的授权缺失，未经身份验证的攻击者可在网络上执行欺骗攻击。CVSS评分9.1。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-50171
3影响范围
以下为部分重点关注漏洞的受影响产品版本，其他漏洞影响产品范围请参阅官方通告链接。
|
漏洞编号 |
受影响产品版本 |
|
CVE-2025-50165 |
Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) |
|
CVE-2025-53766 |
Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems |
|
CVE-2025-49712 |
Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 |
|
CVE-2025-53733 |
Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Word 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions |
|
CVE-2025-53778 |
Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) |
|
CVE-2025-50177 |
Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) |
|
CVE-2025-24999 |
Microsoft SQL Server 2022 for x64-based Systems (CU 20) Microsoft SQL Server 2019 for x64-based Systems (CU 32) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft SQL Server 2017 for x64-based Systems (CU 31) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft SQL Server 2017 for x64-based Systems (GDR) |
|
CVE-2025-53792 |
Azure Portal |
|
CVE-2025-50171 |
Windows Server 2025 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2025 (Server Core installation) Windows Server 2022 (Server Core installation) Windows Server 2022 |
4漏洞防护
4.1 补丁更新
目前微软官方已针对受支持的产品版本发布了修复以上漏洞的安全补丁，强烈建议受影响用户尽快安装补丁进行防护，官方下载链接：
https://msrc.microsoft.com/update-guide/en-us/releaseNote/2025-Aug
注：由于网络问题、计算机环境问题等原因，Windows Update的补丁更新可能出现失败。用户在安装补丁后，应及时检查补丁是否成功更新。
右键点击Windows图标，选择“设置(N)”，选择“更新和安全”-“Windows更新”，查看该页面上的提示信息，也可点击“查看更新历史记录”查看历史更新情况。
针对未成功安装的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载独立程序包并安装。
附录：漏洞列表
|
影响产品 |
CVE编号 |
漏洞标题 |
严重程度 |
|
Microsoft 365 Copilot's Business Chat |
Microsoft 365 Copilot BizChat 信息泄露漏洞 |
Critical |
|
|
Microsoft 365 Copilot's Business Chat |
CVE-2025-53774 |
Microsoft 365 Copilot BizChat 信息泄露漏洞 |
Critical |
|
Azure Portal |
CVE-2025-53792 |
Azure 门户特权提升漏洞 |
Critical |
|
Azure OpenAI |
CVE-2025-53767 |
Azure OpenAI 特权提升漏洞 |
Critical |
|
Azure Virtual Machines |
CVE-2025-49707 |
Azure Virtual Machines Spoofing Vulnerability |
Critical |
|
Role: Windows Hyper-V |
CVE-2025-48807 |
Windows Hyper-V 远程执行代码漏洞 |
Critical |
|
Azure Stack |
CVE-2025-53793 |
Azure Stack Hub 信息泄露漏洞 |
Critical |
|
Microsoft Office Word |
CVE-2025-53784 |
Microsoft Word 远程执行代码漏洞 |
Critical |
|
Windows NTLM |
CVE-2025-53778 |
Windows NTLM 特权提升漏洞 |
Critical |
|
Windows GDI+ |
CVE-2025-53766 |
GDI 远程执行代码漏洞 |
Critical |
|
Microsoft Office |
CVE-2025-53740 |
Microsoft Office 远程执行代码漏洞 |
Critical |
|
Microsoft Office Word |
CVE-2025-53733 |
Microsoft Word 远程执行代码漏洞 |
Critical |
|
Microsoft Office |
CVE-2025-53731 |
Microsoft Office 远程执行代码漏洞 |
Critical |
|
Windows Message Queuing |
CVE-2025-50177 |
Microsoft 消息队列 (MSMQ) 远程代码执行漏洞 |
Critical |
|
Graphics Kernel |
CVE-2025-50176 |
DirectX 图形内核远程代码执行漏洞 |
Critical |
|
Microsoft Graphics Component |
CVE-2025-50165 |
Windows 图形组件远程执行代码漏洞 |
Critical |
|
Azure Virtual Machines |
CVE-2025-53781 |
Azure Virtual Machines Information Disclosure Vulnerability |
Critical |
|
Microsoft Office SharePoint |
CVE-2025-49712 |
Microsoft SharePoint 远程执行代码漏洞 |
Important |
|
Windows StateRepository API |
CVE-2025-53789 |
Windows StateRepository API 服务器文件特权提升漏洞 |
Important |
|
Windows Subsystem for Linux |
CVE-2025-53788 |
Windows Subsystem for Linux (WSL2) 内核特权提升漏洞 |
Important |
|
Microsoft Teams |
CVE-2025-53783 |
Microsoft Teams 远程代码执行漏洞 |
Important |
|
Windows Push Notifications |
CVE-2025-50155 |
Windows 推送通知应用程序特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50157 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Windows Security App |
CVE-2025-53769 |
Windows 安全应用程序欺骗漏洞 |
Important |
|
Azure Stack |
CVE-2025-53765 |
Azure Stack Hub 信息泄露漏洞 |
Important |
|
Microsoft Office Excel |
CVE-2025-53739 |
Microsoft Excel 远程执行代码漏洞 |
Important |
|
Microsoft Office Word |
CVE-2025-53738 |
Microsoft Word 远程执行代码漏洞 |
Important |
|
Microsoft Office Excel |
CVE-2025-53737 |
Microsoft Excel 远程执行代码漏洞 |
Important |
|
Microsoft Office Word |
CVE-2025-53736 |
Microsoft Word 信息泄露漏洞 |
Important |
|
Microsoft Office Excel |
CVE-2025-53735 |
Microsoft Excel 远程执行代码漏洞 |
Important |
|
Microsoft Office Visio |
CVE-2025-53734 |
Microsoft Office Visio 远程执行代码漏洞 |
Important |
|
Microsoft Office |
CVE-2025-53732 |
Microsoft Office 远程执行代码漏洞 |
Important |
|
SQL Server |
CVE-2025-47954 |
Microsoft SQL Server 特权提升漏洞 |
Important |
|
Microsoft Dynamics 365 (on-premises) |
CVE-2025-53728 |
Microsoft Dynamics 365（本地）信息泄露漏洞 |
Important |
|
Windows Push Notifications |
CVE-2025-53726 |
Windows 推送通知应用程序特权提升漏洞 |
Important |
|
Windows Push Notifications |
CVE-2025-53725 |
Windows 推送通知应用程序特权提升漏洞 |
Important |
|
Windows Push Notifications |
CVE-2025-53724 |
Windows 推送通知应用程序特权提升漏洞 |
Important |
|
Role: Windows Hyper-V |
CVE-2025-53723 |
Windows Hyper-V 特权提升漏洞 |
Important |
|
Windows Remote Desktop Services |
CVE-2025-53722 |
Windows 远程桌面服务拒绝服务漏洞 |
Important |
|
Windows Connected Devices Platform Service |
CVE-2025-53721 |
Windows 互联设备平台服务特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-53720 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-53719 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53718 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows Local Security Authority Subsystem Service (LSASS) |
CVE-2025-53716 |
本地安全认证子系统服务 (LSASS) 拒绝服务漏洞 |
Important |
|
Storage Port Driver |
CVE-2025-53156 |
Windows 存储端口驱动程序信息泄露漏洞 |
Important |
|
Role: Windows Hyper-V |
CVE-2025-53155 |
Windows Hyper-V 特权提升漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53154 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-53153 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Desktop Windows Manager |
CVE-2025-53152 |
桌面窗口管理器远程代码执行漏洞 |
Important |
|
Windows Kernel |
CVE-2025-53151 |
Windows 内核特权提升漏洞 |
Important |
|
Kernel Streaming WOW Thunk Service Driver |
CVE-2025-53149 |
Kernel Streaming WOW Thunk 服务驱动程序特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-53148 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53147 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows Message Queuing |
CVE-2025-53145 |
Microsoft 消息队列 (MSMQ) 远程代码执行漏洞 |
Important |
|
Windows Message Queuing |
CVE-2025-53144 |
Microsoft 消息队列 (MSMQ) 远程代码执行漏洞 |
Important |
|
Windows Message Queuing |
CVE-2025-53143 |
Microsoft 消息队列 (MSMQ) 远程代码执行漏洞 |
Important |
|
Microsoft Brokering File System |
CVE-2025-53142 |
Microsoft 代理文件系统特权提升漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53141 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Kernel Transaction Manager |
CVE-2025-53140 |
Windows 内核事务管理器特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-53138 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53137 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows NT OS Kernel |
CVE-2025-53136 |
NT OS 内核信息泄露漏洞 |
Important |
|
Windows DirectX |
CVE-2025-53135 |
DirectX 图形内核特权提升漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-53134 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows PrintWorkflowUserSvc |
CVE-2025-53133 |
Windows PrintWorkflowUserSvc 特权提升漏洞 |
Important |
|
Windows Win32K - GRFX |
CVE-2025-53132 |
Win32k 特权提升漏洞 |
Important |
|
Windows Media |
CVE-2025-53131 |
Windows Media 远程执行代码漏洞 |
Important |
|
Windows Installer |
CVE-2025-50173 |
Windows Installer 特权提升漏洞 |
Important |
|
Windows DirectX |
CVE-2025-50172 |
DirectX 图形内核拒绝服务漏洞 |
Important |
|
Remote Desktop Server |
CVE-2025-50171 |
远程桌面欺骗漏洞 |
Important |
|
Windows Cloud Files Mini Filter Driver |
CVE-2025-50170 |
Windows Cloud Files Mini Filter Driver 特权提升漏洞 |
Important |
|
Windows SMB |
CVE-2025-50169 |
Windows SMB 远程执行代码漏洞 |
Important |
|
Windows Win32K - ICOMP |
CVE-2025-50168 |
Win32k 特权提升漏洞 |
Important |
|
Role: Windows Hyper-V |
CVE-2025-50167 |
Windows Hyper-V 特权提升漏洞 |
Important |
|
Windows Distributed Transaction Coordinator |
CVE-2025-50166 |
Windows 分布式事务处理协调器 (MSDTC) 信息泄露漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50164 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50163 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50162 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Windows Win32K - GRFX |
CVE-2025-50161 |
Win32k 特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50160 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Remote Access Point-to-Point Protocol (PPP) EAP-TLS |
CVE-2025-50159 |
远程访问点对点协议 (PPP) EAP-TLS特权提升漏洞 |
Important |
|
Windows NTFS |
CVE-2025-50158 |
Windows NTFS 信息泄露漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-50156 |
Windows 路由和远程访问服务 (RRAS) 信息披露漏洞 |
Important |
|
Windows File Explorer |
CVE-2025-50154 |
Microsoft Windows 文件资源管理器欺骗漏洞 |
Important |
|
Desktop Windows Manager |
CVE-2025-50153 |
桌面窗口管理器特权提升漏洞 |
Important |
|
Windows Ancillary Function Driver for WinSock |
CVE-2025-49762 |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 |
Important |
|
Windows Kernel |
CVE-2025-49761 |
Windows 内核特权提升漏洞 |
Important |
|
SQL Server |
CVE-2025-49759 |
Microsoft SQL Server 特权提升漏洞 |
Important |
|
Windows Routing and Remote Access Service (RRAS) |
CVE-2025-49757 |
Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞 |
Important |
|
Microsoft Graphics Component |
CVE-2025-49743 |
Windows 图形组件特权提升漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2025-25007 |
Microsoft Exchange Server 欺骗漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2025-25006 |
Microsoft Exchange Server 欺骗漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2025-25005 |
Microsoft Exchange Server 篡改漏洞 |
Important |
|
GitHub Copilot and Visual Studio |
CVE-2025-53773 |
GitHub Copilot 和 Visual Studio 远程代码执行漏洞 |
Important |
|
Web Deploy |
CVE-2025-53772 |
Web 部署远程代码执行漏洞 |
Important |
|
SQL Server |
CVE-2025-24999 |
Microsoft SQL Server 特权提升漏洞 |
Important |
|
Microsoft Office PowerPoint |
CVE-2025-53761 |
Microsoft PowerPoint 远程代码执行漏洞 |
Important |
|
Microsoft Office SharePoint |
CVE-2025-53760 |
Microsoft SharePoint 特权提升漏洞 |
Important |
|
Microsoft Office Excel |
CVE-2025-53759 |
Microsoft Excel 远程执行代码漏洞 |
Important |
|
Microsoft Office Excel |
CVE-2025-53741 |
Microsoft Excel 远程执行代码漏洞 |
Important |
|
Microsoft Office Visio |
CVE-2025-53730 |
Microsoft Office Visio 远程执行代码漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2025-33051 |
Microsoft Exchange Server 信息泄露漏洞 |
Important |
|
Azure File Sync |
CVE-2025-53729 |
Microsoft Azure 文件同步特权提升漏洞 |
Important |
|
SQL Server |
CVE-2025-53727 |
Microsoft SQL Server 特权提升漏洞 |
Important |
|
SQL Server |
CVE-2025-49758 |
Microsoft SQL Server 特权提升漏洞 |
Important |
|
Microsoft Dynamics 365 (on-premises) |
CVE-2025-49745 |
Microsoft Dynamics 365（本地）跨站点脚本漏洞 |
Important |
|
Role: Windows Hyper-V |
CVE-2025-49751 |
Windows Hyper-V 拒绝服务漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2025-53786 |
Microsoft Exchange Server 混合部署特权提升漏洞 |
Important |
|
Microsoft Edge for Android |
CVE-2025-49736 |
Android 版 Microsoft Edge（基于Chromium）欺骗漏洞 |
Moderate |
|
Windows Kerberos |
CVE-2025-53779 |
Windows Kerberos 特权提升漏洞 |
Moderate |
|
Microsoft Edge for Android |
CVE-2025-49755 |
Android 版 Microsoft Edge（基于Chromium）欺骗漏洞 |
Low |
END
本安全公告仅用来描述可能存在的安全问题，绿盟科技不为此安全公告提供任何保证或承诺。由于传播、利用此安全公告所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，绿盟科技以及安全公告作者不为此承担任何责任。
绿盟科技拥有对此安全公告的修改和解释权。如欲转载或传播此安全公告，必须保证此安全公告的完整性，包括版权声明等全部内容。未经绿盟科技允许，不得任意修改或者增减此安全公告内容，不得以任何方式将其用于商业目的。
原文始发于微信公众号（绿盟科技CERT）：【安全更新】微软8月安全更新多个产品高危漏洞通告
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论