[UPDATE] Microsoft Windows and Windows Server: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The BSI advisory aggregates several Windows vulnerabilities without listing specific CVE IDs, so the actual patch level can only be determined via the Microsoft security bulletins.
Description
The BSI advisory references multiple vulnerabilities in various versions of Microsoft Windows and Microsoft Windows Server. A remote, anonymous attacker can exploit these to escalate privileges to administrative rights, execute arbitrary code, disclose information, or cause a denial of service. Spoofing attacks and other unspecified impacts are also mentioned. The advisory does not list specific CVE IDs, CVSS scores, or attack vectors; it is an aggregated update. The text contains no information on exploitation status (active exploitation, KEV listing, PoC).
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational