The remote Windows host is missing security update 5053603. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053887. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
232621	KB5053603: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	2025/3/11	2025/9/17	high
232622	KB5053887: Windows Server 2012 R2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	2025/3/11	2025/9/17	high

偵測

搜尋 Plugin

high

high