CNNVD-202509-1243 Information
CNNVD ID
CNNVD-202509-1243
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Microsoft Windows Local Security Authority Subsystem Service是美国微软（Microsoft）公司的一个内部程序，负责运行Windows系统安全政策。它在用户登录时电脑单机或服务器时，验证用户身份，管理用户密码变更，并产生访问字符。它也会在窗口安全日志中留下应有的记录。 Microsoft Windows Local Security Authority Subsystem Service存在安全漏洞。攻击者利用该漏洞可以提升权限。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for ARM64-based Systems,Windows 10 Version 22H2 for 32-bit Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 23H2 for ARM64-based Systems。
Description (English)
Microsoft Windows Local Security Security Service is an internal program of Microsoft United States, which operates the Windows security policy. It verifies the identity of the user, manages the password change and produces access characters when the user logs in. It will also leave a proper record in the window security log. There is a security gap in Microsoft Windows Local Security Subsystem Service. The attackers use this loophole to enhance their authority. The following products and editions are affected: Wows for Wows for Wows for Wows for Wows for Wneys for Wows for Wows for Wows for Wows for Wows for Wows for Wows for Systems for Wows for Wows for Bystems for Wows for Bystems, and Forsss Forsys for Bysends for Bysys for Bysysys forgs forgs for Bys forssys forsss forsss forss ands forsss forsss fors ands forss forss forss forss andss forsss forss forss ands forsss forsss forss ands forsss forsss forss ands forss ands fors forss fors forss forss forsss andss forss fors fors fors forss fors for
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
微软
Published
2025-09-09
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54894
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54894
Share on: