VDE-2026-066
Vulnerability from csaf_mettlertoledogmbh - Published: 2026-07-14 10:00 - Updated: 2026-07-14 10:00Summary
METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
Severity
High
Notes
Summary: This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
Impact: Not deploying Windows security patches increases the attack surface, leaves systems exposed to known vulnerabilities, and elevates operational risk.
Mitigation: Install the cumulative Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021. The patches have to be applied to scales FreshWay B and FreshWay D with Windows operating system.
Disclaimer: Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.
Additional Vulnerabilities: Please note the document references for information about additional vulnerabilities.
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CWE-122 - Heap-based Buffer OverflowAffected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
7.8 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.
8.8 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
5.3 (Medium)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.
7.5 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CWE-1287 - Improper Validation of Specified Type of InputAffected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
7.8 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CWE-190 - Integer Overflow or WraparoundAffected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CWE-416 - Use After FreeAffected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31000 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31001 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31002 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31003 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31004 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31005 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31006 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31007 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31008 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31009 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31010 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31011 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31012 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31013 | — |
Mitigation
|
|
| Unresolved product id: CSAFPID-31014 | — |
Mitigation
|
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32000 | — | ||
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — | ||
| Unresolved product id: CSAFPID-32003 | — | ||
| Unresolved product id: CSAFPID-32004 | — | ||
| Unresolved product id: CSAFPID-32005 | — | ||
| Unresolved product id: CSAFPID-32006 | — | ||
| Unresolved product id: CSAFPID-32007 | — | ||
| Unresolved product id: CSAFPID-32008 | — | ||
| Unresolved product id: CSAFPID-32009 | — | ||
| Unresolved product id: CSAFPID-32010 | — | ||
| Unresolved product id: CSAFPID-32011 | — | ||
| Unresolved product id: CSAFPID-32012 | — | ||
| Unresolved product id: CSAFPID-32013 | — | ||
| Unresolved product id: CSAFPID-32014 | — |
References
7 references
Acknowledgments
CERT@VDE
certvde.com
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": "coordination",
"urls": [
"https://certvde.com"
]
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
"text": "High"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.",
"title": "Summary"
},
{
"category": "description",
"text": "Not deploying Windows security patches increases the attack surface, leaves systems exposed to known vulnerabilities, and elevates operational risk.",
"title": "Impact"
},
{
"category": "description",
"text": "Install the cumulative Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021. The patches have to be applied to scales FreshWay B and FreshWay D with Windows operating system.",
"title": "Mitigation"
},
{
"category": "legal_disclaimer",
"text": "Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Please note the document references for information about additional vulnerabilities.",
"title": "Additional Vulnerabilities"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@mt.com",
"name": "Mettler-Toledo GmbH",
"namespace": "https://www.mt.com"
},
"references": [
{
"category": "external",
"summary": "Product security website of METTLER TOLEDO",
"url": "https://www.mt.com/ph/en/home/site_content/product-security.html"
},
{
"category": "external",
"summary": "CERT@VDE Security Advisories for METTLER TOLEDO",
"url": "https://certvde.com/en/advisories/vendor/mettler-toledo/"
},
{
"category": "self",
"summary": "VDE-2026-066: METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D - HTML",
"url": "https://certvde.com/en/advisories/VDE-2026-066/"
},
{
"category": "self",
"summary": "VDE-2026-066: METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D - CSAF",
"url": "https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-066.json"
},
{
"category": "external",
"summary": "Release notes containing additional vulnerabilities (January cumulative update)",
"url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Jan"
},
{
"category": "external",
"summary": "Release notes containing additional vulnerabilities (February cumulative update)",
"url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Feb"
},
{
"category": "external",
"summary": "Release notes containing additional vulnerabilities (March cumulative update)",
"url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Mar"
}
],
"title": "METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D",
"tracking": {
"aliases": [
"VDE-2026-066"
],
"current_release_date": "2026-07-14T10:00:00.000Z",
"generator": {
"date": "2026-07-09T09:38:27.678Z",
"engine": {
"name": "Secvisogram",
"version": "2.6.4"
}
},
"id": "VDE-2026-066",
"initial_release_date": "2026-07-14T10:00:00.000Z",
"revision_history": [
{
"date": "2026-07-14T10:00:00.000Z",
"number": "1.0.0",
"summary": "Initial revision"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "FreshWay B",
"product": {
"name": "FreshWay B scale",
"product_id": "CSAFPID-11000",
"product_identification_helper": {
"cpe": "cpe:2.3:h:mettler_toledo:freshway_b:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "FreshWay D",
"product": {
"name": "FreshWay D scale",
"product_id": "CSAFPID-11001",
"product_identification_helper": {
"cpe": "cpe:2.3:h:mettler_toledo:freshway_d:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Hardware"
}
],
"category": "vendor",
"name": "METTLER TOLEDO"
},
{
"branches": [
{
"branches": [
{
"category": "patch_level",
"name": "KB4577586",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB4577586",
"product_id": "CSAFPID-90000",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb4577586:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5075902",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB5075902",
"product_id": "CSAFPID-90001",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb4577586:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5078938",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB5078938",
"product_id": "CSAFPID-90002",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078938:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB4577586",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB4577586",
"product_id": "CSAFPID-90100",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5075902",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB5075902",
"product_id": "CSAFPID-90101",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5078938",
"product": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB5078938",
"product_id": "CSAFPID-90102",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Windows 10 LTSB 2016"
},
{
"branches": [
{
"category": "patch_level",
"name": "KB5005112",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5005112",
"product_id": "CSAFPID-90003",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5005112:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5066143",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5066143",
"product_id": "CSAFPID-90004",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066143:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5078752",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5078752",
"product_id": "CSAFPID-90005",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078752:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5005112",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5005112",
"product_id": "CSAFPID-90103",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5066143",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5066143",
"product_id": "CSAFPID-90104",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5078752",
"product": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5078752",
"product_id": "CSAFPID-90105",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Windows 10 LTSC 2019"
},
{
"branches": [
{
"category": "patch_level",
"name": "KB5031539",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5031539",
"product_id": "CSAFPID-90006",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5031539:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5066135",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5066135",
"product_id": "CSAFPID-90007",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066135:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "KB5078885",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5078885",
"product_id": "CSAFPID-90008",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078885:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5031539",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5031539",
"product_id": "CSAFPID-90106",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5066135",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5066135",
"product_id": "CSAFPID-90107",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "patch_level",
"name": "w/o KB5078885",
"product": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5078885",
"product_id": "CSAFPID-90108",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Windows 10 LTSC 2021"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB4577586 installed on FreshWay B scale",
"product_id": "CSAFPID-32000",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078938:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90000",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB5075902 installed on FreshWay B scale",
"product_id": "CSAFPID-32001",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5075902:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90001",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 patch KB5078938 installed on FreshWay B scale",
"product_id": "CSAFPID-32002",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078938:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90002",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB4577586 installed on FreshWay B scale",
"product_id": "CSAFPID-31000",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90100",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB5075902 installed on FreshWay B scale",
"product_id": "CSAFPID-31001",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90101",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSB 2016 lacking KB5078938 installed on FreshWay B scale",
"product_id": "CSAFPID-31002",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90102",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5005112 installed on FreshWay B scale",
"product_id": "CSAFPID-32003",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5005112:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90003",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5066143 installed on FreshWay B scale",
"product_id": "CSAFPID-32004",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066143:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90004",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5078752 installed on FreshWay B scale",
"product_id": "CSAFPID-32005",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078752:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90005",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5005112 installed on FreshWay B scale",
"product_id": "CSAFPID-31003",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90103",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5066143 installed on FreshWay B scale",
"product_id": "CSAFPID-31004",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90104",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5078752 installed on FreshWay B scale",
"product_id": "CSAFPID-31005",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90105",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5005112 installed on FreshWay D scale",
"product_id": "CSAFPID-32006",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5005112:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90003",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5066143 installed on FreshWay D scale",
"product_id": "CSAFPID-32007",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066143:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90004",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 patch KB5078752 installed on FreshWay D scale",
"product_id": "CSAFPID-32008",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078752:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90005",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5005112 installed on FreshWay D scale",
"product_id": "CSAFPID-31006",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90103",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5066143 installed on FreshWay D scale",
"product_id": "CSAFPID-31007",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90104",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2019 lacking KB5078752 installed on FreshWay D scale",
"product_id": "CSAFPID-31008",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90105",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5031539 installed on FreshWay B scale",
"product_id": "CSAFPID-32009",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5031539:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90006",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5066135 installed on FreshWay B scale",
"product_id": "CSAFPID-32010",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066135:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90007",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5078885 installed on FreshWay B scale",
"product_id": "CSAFPID-32011",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078885:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90008",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5031539 installed on FreshWay B scale",
"product_id": "CSAFPID-31009",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90106",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5066135 installed on FreshWay B scale",
"product_id": "CSAFPID-31010",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90107",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5078885 installed on FreshWay B scale",
"product_id": "CSAFPID-31011",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90108",
"relates_to_product_reference": "CSAFPID-11000"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5031539 installed on FreshWay D scale",
"product_id": "CSAFPID-32012",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5031539:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90006",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5066135 installed on FreshWay D scale",
"product_id": "CSAFPID-32013",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5066135:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90007",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 patch KB5078885 installed on FreshWay D scale",
"product_id": "CSAFPID-32014",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:kb5078885:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90008",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5031539 installed on FreshWay D scale",
"product_id": "CSAFPID-31012",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90106",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5066135 installed on FreshWay D scale",
"product_id": "CSAFPID-31013",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90107",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Microsoft Windows 10 LTSC 2021 lacking KB5078885 installed on FreshWay D scale",
"product_id": "CSAFPID-31014",
"product_identification_helper": {
"cpe": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-90108",
"relates_to_product_reference": "CSAFPID-11001"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25172",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-26128",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.8,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "NOT_DEFINED",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows SMB Server Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-23673",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 8.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Telephony Service Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-25185",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"environmentalScore": 5.3,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 5.3,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Shell Link Processing Spoofing Vulnerability"
},
{
"cve": "CVE-2026-25181",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "GDI+ Information Disclosure Vulnerability"
},
{
"cve": "CVE-2026-25179",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-25175",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows NTFS Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-25174",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Extensible File Allocation Table Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-26111",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-25171",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"audience": "all",
"category": "description",
"text": "Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
],
"known_affected": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
],
"recommended": [
"CSAFPID-32000",
"CSAFPID-32001",
"CSAFPID-32002",
"CSAFPID-32003",
"CSAFPID-32004",
"CSAFPID-32005",
"CSAFPID-32006",
"CSAFPID-32007",
"CSAFPID-32008",
"CSAFPID-32009",
"CSAFPID-32010",
"CSAFPID-32011",
"CSAFPID-32012",
"CSAFPID-32013",
"CSAFPID-32014"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2016 on FreshWay B scale with one of the following images: Win10_cBW6_STD_300, Win10_cBW6_STD_301, Win10_cBW6_STD_302, Win10_cBW6_STD_303, Win10_cBW6_STD_304, Win10_cBW6_STD_305, Win10_cBW6_STD_306, Win10_cBW6_STD_307, Win10_cBW6_STD_308, Win10_cBW6_STD_309, Win10_cBW6_STD_310, Win10_cBW6_STD_311, Win10_cBW6_STD_VCO_300, Win10_cBW6_STD_VCO_301, Win10_cBW6_STD_VCO_302, Win10_cBW6_STD_VCO_303",
"product_ids": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay B scale with one of the following images: VCO-Win10_cBW6_STD_305_LTSC2019_VCO, VCO-Win10_cBW6_STD_306_LTSC2019_VCO, VCO-Win10_cBW6_STD_307_LTSC2019_VCO",
"product_ids": [
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2019 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-400, Win10_mt-uc3-d-401, Win10_mt-uc3-d-402, Win10_mt-uc3-d-403",
"product_ids": [
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay B scale with one of the following images: Win10_cBW6_STD_350_LTSC2021",
"product_ids": [
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011"
]
},
{
"category": "mitigation",
"details": "Update Microsoft Windows 10 LTSB 2021 on FreshWay D scale with one of the following images: Win10_mt-uc3-d-450, Win10_mt-uc3-d-451, Win10_mt-uc3-d-452, Win10_mt-uc3-d-453, Win10_mt-uc3-d-454, Win10_mt-uc3-d-455, Win10_mt-uc3-d-456, Win10_mt-uc3-d-457, Win10_mt-uc3-d-458, Win10_mt-uc3-d-459, Win10_mt-uc3-d-460",
"product_ids": [
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31000",
"CSAFPID-31001",
"CSAFPID-31002",
"CSAFPID-31003",
"CSAFPID-31004",
"CSAFPID-31005",
"CSAFPID-31006",
"CSAFPID-31007",
"CSAFPID-31008",
"CSAFPID-31009",
"CSAFPID-31010",
"CSAFPID-31011",
"CSAFPID-31012",
"CSAFPID-31013",
"CSAFPID-31014"
]
}
],
"title": "Windows Authentication Elevation of Privilege Vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…