Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-48757 State: PUBLISHED Published: 2025-05-30T00:00:00.000Z Last Updated: 2025-08-21T02:28:45.607Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: Lovable Products: Lovable Problem Types: CWE-863 Description: An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a responsibility over protecting the data of their application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.lovabl
ting the data of their application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.lovable.dev/changelog - https://mattpalmer.io/posts/CVE-2025-48757/ - https://gist.github.com/lhchavez/625ee42a6c408a850d35e50f8e649de9 - https://x.com/danialasaria/status/1911862269996118272 - https://mattpalmer.io/posts/statement-on-CVE-2025-48757/
CVE ID: CVE-2025-48780 State: PUBLISHED Published: 2025-06-06T09:19:04.101Z Last Updated: 2025-06-06T17:01:45.638Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-502 Description: A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-05
CVE ID: CVE-2025-48781 State: PUBLISHED Published: 2025-06-06T09:21:58.306Z Last Updated: 2025-06-06T16:57:16.260Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-73 Description: An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-06
CVE ID: CVE-2025-48782 State: PUBLISHED Published: 2025-06-06T09:24:17.416Z Last Updated: 2025-06-06T15:52:16.480Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-434 Description: An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-07
CVE ID: CVE-2025-48783 State: PUBLISHED Published: 2025-06-06T09:27:01.375Z Last Updated: 2025-06-06T15:46:21.188Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-73 Description: An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-08
CVE ID: CVE-2025-48784 State: PUBLISHED Published: 2025-06-06T09:28:39.751Z Last Updated: 2025-06-06T15:43:27.120Z Vendors: Soar Cloud System CO., LTD. Products: HRD Human Resource Management System Problem Types: CWE-862 Description: A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zuso.ai/advisory/za-2025-09
CVE ID: CVE-2025-48786 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:08.736Z Description: No description available.
CVE ID: CVE-2025-48787 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:08.287Z Description: No description available.
CVE ID: CVE-2025-48788 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:07.848Z Description: No description available.
CVE ID: CVE-2025-48789 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:07.404Z Description: No description available.
CVE ID: CVE-2025-48790 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:06.936Z Description: No description available.
CVE ID: CVE-2025-48791 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:06.480Z Description: No description available.
CVE ID: CVE-2025-48792 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:06.027Z Description: No description available.
CVE ID: CVE-2025-48793 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:05.548Z Description: No description available.
CVE ID: CVE-2025-48794 State: REJECTED Published: N/A Last Updated: 2025-05-27T02:55:04.997Z Description: No description available.
CVE ID: CVE-2025-48795 State: PUBLISHED Published: 2025-07-15T14:26:44.758Z Last Updated: 2025-11-04T21:11:06.901Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: CWE-400 Description: Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire temporary file is read into memory and then logged. An attacker might be able to exploit this to cause a denial of service attack by causing an out of memory exception. In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials from being cached unencrypted on the local filesystem, however this bug means t
y files to prevent sensitive credentials from being cached unencrypted on the local filesystem, however this bug means that the cached files are written out to logs unencrypted. Users are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or 4.1.1, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/vo5qv02mvv5plmb6z2xf1ktjmrpv3jmn
CVE ID: CVE-2025-48796 State: PUBLISHED Published: 2025-05-27T14:04:55.400Z Last Updated: 2025-11-20T07:39:52.612Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-121 Description: A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
icious ANI file to trigger arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-48796 - https://bugzilla.redhat.com/show_bug.cgi?id=2368559 - https://gitlab.gnome.org/GNOME/gimp/-/issues/9257
CVE ID: CVE-2025-48797 State: PUBLISHED Published: 2025-05-27T14:04:57.389Z Last Updated: 2025-11-06T21:11:32.317Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterpri
8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-122 Description: A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap
by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:9162 - https://access.redhat.com/errata/RHSA-2025:9165 - https://access.redhat.com/errata/RHSA-2025:9308 - https://access.redhat.com/errata/RHSA-2025:9309 - https://access.redhat.com/errata/RHSA-2025:9310 - https://access.redhat.com/errata/RHSA-2025:9314 - https://access.redhat.com/errata/RHSA-2025:9315 - https://access.redhat.com/errata/RHSA-2025:9316 - https://access.redhat.com/errata/RHSA-2025:9501 - https://access.redhat.
tps://access.redhat.com/errata/RHSA-2025:9316 - https://access.redhat.com/errata/RHSA-2025:9501 - https://access.redhat.com/errata/RHSA-2025:9569 - https://access.redhat.com/security/cve/CVE-2025-48797 - https://bugzilla.redhat.com/show_bug.cgi?id=2368558 - https://gitlab.gnome.org/GNOME/gimp/-/issues/11822
CVE ID: CVE-2025-48798 State: PUBLISHED Published: 2025-05-27T14:05:12.977Z Last Updated: 2025-11-06T21:11:34.112Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterpri
8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-416 Description: A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free
tacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:9162 - https://access.redhat.com/errata/RHSA-2025:9165 - https://access.redhat.com/errata/RHSA-2025:9308 - https://access.redhat.com/errata/RHSA-2025:9309 - https://access.redhat.com/errata/RHSA-2025:9310 - https://access.redhat.com/errata/RHSA-2025:9314 - https://access.redhat.com/errata/RHSA-2025:9315 - https://access.redhat.com/errata/RHSA-2025:9316 - https://access.redhat.com/errata/RHSA-2025:9501 - https://access.redhat.com/errat
ess.redhat.com/errata/RHSA-2025:9316 - https://access.redhat.com/errata/RHSA-2025:9501 - https://access.redhat.com/errata/RHSA-2025:9569 - https://access.redhat.com/security/cve/CVE-2025-48798 - https://bugzilla.redhat.com/show_bug.cgi?id=2368557 - https://gitlab.gnome.org/GNOME/gimp/-/issues/11822
CVE ID: CVE-2025-48799 State: PUBLISHED Published: 2025-07-08T16:57:36.120Z Last Updated: 2025-09-15T17:45:21.200Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607 Problem Types: CWE-59 Description: Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally. Additional Analyst
nk following') in Windows Update Service allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48799
CVE ID: CVE-2025-48800 State: PUBLISHED Published: 2025-07-08T16:57:36.690Z Last Updated: 2025-08-23T00:39:56.519Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-693 Description: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48800
CVE ID: CVE-2025-48802 State: PUBLISHED Published: 2025-07-08T16:57:37.352Z Last Updated: 2025-08-23T00:39:57.139Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-295 Description: Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48802
CVE ID: CVE-2025-48803 State: PUBLISHED Published: 2025-07-08T16:57:37.872Z Last Updated: 2025-08-23T00:39:57.768Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-353 Description: Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48803
CVE ID: CVE-2025-48804 State: PUBLISHED Published: 2025-07-08T16:57:38.543Z Last Updated: 2025-08-23T00:39:58.460Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-349 Description: Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48804
CVE ID: CVE-2025-48805 State: PUBLISHED Published: 2025-07-08T16:57:39.071Z Last Updated: 2025-08-23T00:39:59.109Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.
n: Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48805
CVE ID: CVE-2025-48806 State: PUBLISHED Published: 2025-07-08T16:57:39.720Z Last Updated: 2025-08-23T00:39:59.744Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally. Additional
n: Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48806
CVE ID: CVE-2025-48807 State: PUBLISHED Published: 2025-08-12T17:10:44.021Z Last Updated: 2025-11-10T00:12:48.957Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-923 Description: Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48807
CVE ID: CVE-2025-48808 State: PUBLISHED Published: 2025-07-08T16:57:40.307Z Last Updated: 2025-08-23T00:40:00.661Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to discl
ion: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48808
CVE ID: CVE-2025-48809 State: PUBLISHED Published: 2025-07-08T16:57:40.982Z Last Updated: 2025-08-23T00:40:01.289Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-1037 Description: Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48809