30
- شناسه CVE-2025-21320 :CVE
- CWE-532 :CWE
- yes :Advisory
- منتشر شده: ژانویه 14, 2025
- به روز شده: ژانویه 31, 2025
- امتیاز: 5.5
- نوع حمله: T1592
- اثر گذاری: Information Disclosure
- حوزه: سیستم‌عامل‌ها و اجزای کلیدی آن
- برند: Microsoft
- محصول: Windows
- وضعیتPublished :CVE
- No :POC
- وضعیت آسیب پذیری: patch شده
چکیده
یک آسیب‌پذیری در ویندوز پیدا شده و به عنوان آسیب پذیری با شدت متوسط دسته بندی شده است. این آسیب پذیری روی کد ناشناخته حافظه هسته تأثیر می گذارد. حمله باید به صورت لوکال انجام شود. در حال حاضر هیچ اکسپلویتی در دسترس نیست. توصیه می شود برای رفع این مشکل از پچ و بروزرسانی استفاده شود.
توضیحات
یک آسیب‌پذیری در کرنل حافظه‌ی ویندوز شناسایی شده است. این آسیب‌پذیری در طبقه‌بندی CWE تحت عنوان CWE-532 قرار می‌گیرد، که به افشای اطلاعات حساس در لاگ فایل‌ها اشاره دارد. برخی اطلاعات حساس در لاگ‌ها ذخیره می‌شوند، که می‌تواند به مهاجمان کمک کند یا اطلاعات کاربران را فاش کند. این آسیب پذیری فقط به‌صورت محلی (Local) قابل اجرا است، یعنی مهاجم باید به سیستم دسترسی داشته باشد.
مایکروسافت یک پچ امنیتی منتشر کرده که این مشکل را برطرف می‌کند، بنابراین نصب آخرین به‌روزرسانی‌های ویندوز توصیه می‌شود.
CVSS
| Score | Severity | Version | Vector String | ||
| 5.5 | MEDIUM | 3.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C | ||
لیست محصولات آسیب پذیر
| version | platform | product |
| affected from 10.0.17763.0 before 10.0.17763.6775 | 32-bit Systems, x64-based Systems | Windows 10 Version 1809 |
| affected from 10.0.17763.0 before 10.0.17763.6775 | x64-based Systems | Windows Server 2019 |
| affected from 10.0.17763.0 before 10.0.17763.6775 | x64-based Systems | Windows Server 2019 (Server Core installation) |
| affected from 10.0.20348.0 before 10.0.20348.3091 | x64-based Systems | Windows Server 2022 |
| affected from 10.0.19043.0 before 10.0.19044.5371 | 32-bit Systems, ARM64-based Systems, x64-based Systems | Windows 10 Version 21H2 |
| affected from 10.0.22621.0 before 10.0.22621.4751 | ARM64-based Systems, x64-based Systems | Windows 11 version 22H2 |
| affected from 10.0.19045.0 before 10.0.19045.5371 | x64-based Systems, ARM64-based Systems, 32-bit Systems | Windows 10 Version 22H2 |
| affected from 10.0.26100.0 before 10.0.26100.2894 | x64-based Systems | Windows Server 2025 (Server Core installation) |
| affected from 10.0.22631.0 before 10.0.22631.4751 | ARM64-based Systems | Windows 11 version 22H3 |
| affected from 10.0.22631.0 before 10.0.22631.4751 | x64-based Systems | Windows 11 Version 23H2 |
| affected from 10.0.25398.0 before 10.0.25398.1369 | x64-based Systems | Windows Server 2022, 23H2 Edition (Server Core installation) |
| affected from 10.0.26100.0 before 10.0.26100.2894 | ARM64-based Systems, x64-based Systems | Windows 11 Version 24H2 |
| affected from 10.0.26100.0 before 10.0.26100.2894 | x64-based Systems | Windows Server 2025 |
| affected from 10.0.10240.0 before 10.0.10240.20890 | 32-bit Systems, x64-based Systems | Windows 10 Version 1507 |
| affected from 10.0.14393.0 before 10.0.14393.7699 | 32-bit Systems, x64-based Systems | Windows 10 Version 1607 |
| affected from 10.0.14393.0 before 10.0.14393.7699 | x64-based Systems | Windows Server 2016 |
| affected from 10.0.14393.0 before 10.0.14393.7699 | x64-based Systems | Windows Server 2016 (Server Core installation) |
| affected from 6.0.6003.0 before 6.0.6003.23070 | 32-bit Systems | Windows Server 2008 Service Pack 2 |
| affected from 6.0.6003.0 before 6.0.6003.23070 | 32-bit Systems, x64-based Systems | Windows Server 2008 Service Pack 2 (Server Core installation) |
| affected from 6.0.6003.0 before 6.0.6003.23070 | x64-based Systems | Windows Server 2008 Service Pack 2 |
| affected from 6.1.7601.0 before 6.1.7601.27520 | x64-based Systems | Windows Server 2008 R2 Service Pack 1 |
| affected from 6.1.7601.0 before 6.1.7601.27520 | x64-based Systems | Windows Server 2008 R2 Service Pack 1 (Server Core installation) |
| affected from 6.2.9200.0 before 6.2.9200.25273 | x64-based Systems | Windows Server 2012 |
| affected from 6.2.9200.0 before 6.2.9200.25273 | x64-based Systems | Windows Server 2012 (Server Core installation) |
| affected from 6.3.9600.0 before 6.3.9600.22371 | x64-based Systems | Windows Server 2012 R2 |
| affected from 6.3.9600.0 before 6.3.9600.22371 | x64-based Systems | Windows Server 2012 R2 (Server Core installation) |
لیست محصولات بروز شده
| Product | Build Number |
| Windows Server 2012 R2 (Server Core installation) | 6.3.9600.22371 |
| Windows Server 2012 R2 | 6.3.9600.22371 |
| Windows Server 2012 (Server Core installation) | 6.2.9200.25273 |
| Windows Server 2012 | 6.2.9200.25273 |
| Windows Server 2022 (Server Core installation) | 10.0.20348.3091 |
| Windows Server 2022 | 10.0.20348.3091 |
| Windows Server 2019 (Server Core installation) | 10.0.17763.6775 |
| Windows Server 2019 | 10.0.17763.6775 |
| Windows 10 Version 1809 for x64-based Systems | 10.0.17763.6775 |
| Windows 10 Version 1809 for 32-bit Systems | 10.0.17763.6775 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | 6.1.7601.27520 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | 6.0.6003.23070 |
| Windows Server 2016 (Server Core installation) | 10.0.14393.7699 |
| Windows Server 2016 | 10.0.14393.7699 |
| Windows 10 Version 1607 for x64-based Systems | 10.0.14393.7699 |
| Windows 10 Version 1607 for 32-bit Systems | 10.0.14393.7699 |
| Windows 10 for x64-based Systems | 10.0.10240.20890 |
| Windows 10 for 32-bit Systems | 10.0.10240.20890 |
| Windows Server 2025 | 10.0.26100.2894 |
| Windows 11 Version 24H2 for x64-based Systems | 10.0.26100.2894 |
| Windows 11 Version 24H2 for ARM64-based Systems | 10.0.26100.2894 |
| Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.1369 |
| Windows 11 Version 23H2 for x64-based Systems | 10.0.22631.4751 |
| Windows 11 Version 23H2 for ARM64-based Systems | 10.0.22631.4751 |
| Windows Server 2025 (Server Core installation) | 10.0.26100.2894 |
| Windows 10 Version 22H2 for 32-bit Systems | 10.0.19045.5371 |
| Windows 10 Version 22H2 for ARM64-based Systems | 10.0.19045.5371 |
| Windows 10 Version 22H2 for x64-based Systems | 10.0.19045.5371 |
| Windows 11 Version 22H2 for x64-based Systems | 10.0.22621.4751 |
| Windows 11 Version 22H2 for ARM64-based Systems | 10.0.22621.4751 |
| Windows 10 Version 21H2 for x64-based Systems | 10.0.19044.5371 |
| Windows 10 Version 21H2 for ARM64-based Systems | 10.0.19044.5371 |
| Windows 10 Version 21H2 for 32-bit Systems | 10.0.19044.5371 |
نتیجه گیری
بررسی کنید که لاگ‌ها اطلاعات حساسی ذخیره نکنند (اگر لاگ‌های سیستمی را مدیریت می‌کنید).
دسترسی‌های لاگ فایل‌ها را محدود کنید تا مهاجمان احتمالی نتوانند از آن‌ها سوءاستفاده کنند.
همواره سیستم خود را بروز نگه دارید.
