漏洞概要
2025年5月14日（北京时间），微软发布了2025 年 5月安全更新，共发布了82个CVE的补丁程序，同比上月减少了42个。
在漏洞安全等级方面，存在11个标记等级为“Critical”的漏洞，67个漏洞被标记为“Important/High”等级的漏洞； 在漏洞类型方面，主要有32个远程代码执行漏洞，21个权限提升漏洞以及17个信息泄露漏洞。
重要漏洞分析
Microsoft DWM 核心库权限提升漏洞 CVE-2025-30400
DWM桌面窗口管理器是自Windows Vista以来Microsoft Windows中的合成窗口管理器，它允许使用硬件加速来呈现 Windows 的图形用户界面。它最初是为了启用部分新的“ Windows Aero ”用户体验而创建的，它允许诸如透明度、3D 窗口切换等效果。
其中存在特权提升漏洞，攻击者可以利用该漏洞在目标系统上获取更高的权限。该漏洞存在在野利用经过评估，危害比较大，我们建议用户及时更新微软安全补丁。
脚本引擎内存损坏漏洞 CVE-2025-30397
脚本引擎负责解析如Javascript等的脚本。在MSHTML, EdgeHTML和脚本平台中使用，Microsoft Edge 中的 Internet Explorer 模式以及使用 WebBrowser 控件的其他应用程序使用 MSHTML 平台。WebView 和一些 UWP 应用程序使用 EdgeHTML 平台。MSHTML 和 EdgeHTML 使用脚本平台。
其中存在内存损坏漏洞，可导致远程执行代码攻击，攻击者可以利用该漏洞在目标系统执行任意代码，该漏洞存在在野利用，经过评估，危害比较大，我们建议用户及时更新微软安全补丁。
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 CVE-2025-32709
Winsock是 Windows 操作系统的网络编程接口，定义了应用程序如何通过套接字访问网络服务，特别是 TCP/IP 协议。 它提供了标准接口，使得 Windows 上的网络应用程序能够进行数据传输和通信。
其中存在权限提升漏洞，攻击者可以利用该漏洞在目标系统获取更高的权限。该漏洞存在在野利用，经过评估，危害比较大，我们建议用户及时更新微软安全补丁。
Windows 通用日志文件系统驱动程序提升权限漏洞CVE-2025-32701 CVE-2025-32706
通用日志文件系统是一个通用目的的日志文件系统，它可以从内核模式或用户模式的应用程序访问，用以构建一个高性能的事务日志。
其中存在权限提升漏洞，攻击者可以利用该漏洞在目标系统获取更高的权限。该漏洞存在在野利用，经过评估，危害比较大，我们建议用户及时更新微软安全补丁。
3.2 影响范围
漏洞名称、CVE编号 | 受影响版本 |
Microsoft DWM 核心库权限提升漏洞 CVE-2025-30400 | Windows Server 2025 (Server Core installation) Windows Server 2025 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems |
脚本引擎内存损坏漏洞 CVE-2025-30397 | Windows Server 2025 (Server Core installation) Windows Server 2025 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems |
WinSock 的 Windows 辅助功能驱动程序特权提升漏洞 CVE-2025-32709 | Windows Server 2025 (Server Core installation) Windows Server 2025 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems |
Windows 通用日志文件系统驱动程序提升权限漏洞 CVE-2025-32701 CVE-2025-32706 | Windows Server 2025 (Server Core installation) Windows Server 2025 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems |
官方修复建议
微软官方已更新受影响软件的安全补丁，用户可根据不同系统版本下载安装对应的安全补丁。