CVE-2025-29828CriticalCVSS 8.1
Windows Schannel Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.
🎯 Affected products11
- Windows 11 Version 22H2 for ARM64-based Systems
- Windows 11 Version 22H2 for x64-based Systems
- Windows 11 Version 23H2 for ARM64-based Systems
- Windows 11 Version 23H2 for x64-based Systems
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2022, 23H2 Edition (Server Core installation)
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5060526 (Security Update) — fixed build 10.0.20348.3807 KB5060525 (SecurityHotpatchUpdate) — fixed build 10.0.20348.3745 KB5060999 (Security Update) — fixed build 10.0.22621.5472 KB5060842 (Security Update) — fixed build 10.0.26100.4349 KB5060841 (SecurityHotpatchUpdate) — fixed build 10.0.26100.4270 KB5060999 (Security Update) — fixed build 10.0.22631.5472 KB5060118 (Security Update) — fixed build 10.0.25398.1665
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29828
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060526
- referencehttps://support.microsoft.com/help/5060526
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060525
- referencehttps://support.microsoft.com/help/5060525
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060999
- referencehttps://support.microsoft.com/help/5060999
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060842
- referencehttps://support.microsoft.com/help/5060842
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060841
- referencehttps://support.microsoft.com/help/5060841
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5060118
- referencehttps://support.microsoft.com/help/5060118