Vulnerability-Lookup

NCSC-2025-0159

Vulnerability from csaf_ncscnl - Published: 2025-05-13 19:47 - Updated: 2025-05-13 19:47

Summary

Kwetsbaarheden verholpen in Microsoft Windows

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Microsoft heeft kwetsbaarheden verholpen in Windows.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Omzeilen van een beveiligingsmaatregel - Uitvoer van willekeurige code (root/adminrechten) - Uitvoer van willekeurige code (gebruikersrechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens - Verkrijgen van verhoogde rechten ``` Windows Trusted Runtime Interface Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29829 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows File Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29839 | 4.00 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Remote Desktop: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29966 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Active Directory Certificate Services (AD CS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29968 | 6.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Ancillary Function Driver for WinSock: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32709 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Drivers: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29838 | 7.40 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Kernel: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29974 | 5.70 | Toegang tot gevoelige gegevens | | CVE-2025-24063 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows DWM: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30400 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Brokering File System: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29970 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Installer: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29837 | 5.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Microsoft Scripting Engine: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30397 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Hardware Lab Kit: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-27488 | 6.70 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Routing and Remote Access Service (RRAS): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29959 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29960 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29830 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29832 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29835 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29836 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29958 | 6.50 | Toegang tot gevoelige gegevens | | CVE-2025-29961 | 6.50 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Win32K - GRFX: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Role: Windows Hyper-V: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29955 | 6.20 | Denial-of-Service | |----------------|------|-------------------------------------| Web Threat Defense (WTD.sys): |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29971 | 7.50 | Denial-of-Service | |----------------|------|-------------------------------------| Windows NTFS: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32707 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Remote Desktop Gateway Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29967 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-30394 | 5.90 | Denial-of-Service | | CVE-2025-26677 | 7.50 | Denial-of-Service | | CVE-2025-29831 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Universal Print Management Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29841 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Media: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29964 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29840 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29962 | 8.80 | Uitvoeren van willekeurige code | | CVE-2025-29963 | 8.80 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows Virtual Machine Bus: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29833 | 7.10 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows SMB: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29956 | 5.40 | Toegang tot gevoelige gegevens | |----------------|------|-------------------------------------| Windows Common Log File System Driver: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-32701 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-32706 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2025-30385 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Secure Kernel Mode: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-27468 | 7.00 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Windows Fundamentals: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29969 | 7.50 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| Windows LDAP - Lightweight Directory Access Protocol: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29954 | 5.90 | Denial-of-Service | |----------------|------|-------------------------------------| Windows Deployment Services: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29957 | 6.20 | Denial-of-Service | |----------------|------|-------------------------------------| UrlMon: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2025-29842 | 7.50 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| ```

Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance

Kans: medium

Schade: high

CWE-591: Sensitive Data Storage in Improperly Locked Memory

CWE-59: Improper Link Resolution Before File Access ('Link Following')

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-126: Buffer Over-read

CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-908: Use of Uninitialized Resource

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CWE-798: Use of Hard-coded Credentials

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125: Out-of-bounds Read

CWE-416: Use After Free

CWE-476: NULL Pointer Dereference

CWE-400: Uncontrolled Resource Consumption

CWE-122: Heap-based Buffer Overflow

CWE-121: Stack-based Buffer Overflow

CWE-269: Improper Privilege Management

CWE-20: Improper Input Validation

CVE-2025-29959

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 43 products

CVE-2025-29960

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29964

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29966

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29967

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29969

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Known affected 43 products

CVE-2025-27468

CWE-269 - Improper Privilege Management

Affected products

Known affected 43 products

CVE-2025-30400

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-32701

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-32706

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 43 products

CVE-2025-32709

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-29829

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 43 products

CVE-2025-29830

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 43 products

CVE-2025-29832

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29833

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Known affected 43 products

CVE-2025-29835

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29836

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29837

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Known affected 43 products

CVE-2025-29839

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29840

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29842

CWE-349 - Acceptance of Extraneous Untrusted Data With Trusted Data

Affected products

Known affected 43 products

CVE-2025-29954

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 43 products

CVE-2025-29956

CWE-126 - Buffer Over-read

Affected products

Known affected 43 products

CVE-2025-29957

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 43 products

CVE-2025-29958

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Known affected 43 products

CVE-2025-29961

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29962

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29963

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29974

5.7 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-30385

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-30388

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-30397

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Known affected 43 products

CVE-2025-32707

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-24063

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 43 products

CVE-2025-29968

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 43 products

CVE-2025-30394

CWE-591 - Sensitive Data Storage in Improperly Locked Memory

Affected products

Known affected 43 products

CVE-2025-26677

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 43 products

CVE-2025-29831

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-29841

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 43 products

CVE-2025-29971

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 43 products

CVE-2025-29970

CWE-416 - Use After Free

Affected products

Known affected 43 products

CVE-2025-29838

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 43 products

CVE-2025-29955

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 43 products

CVE-2025-27488

CWE-798 - Use of Hard-coded Credentials

Affected products

Known affected 43 products

References

44 references

URL	Category
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in Windows.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Omzeilen van een beveiligingsmaatregel\n- Uitvoer van willekeurige code (root/adminrechten)\n- Uitvoer van willekeurige code (gebruikersrechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n- Verkrijgen van verhoogde rechten\n\n```\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29829 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29839 | 4.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29966 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29968 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32709 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29838 | 7.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29974 | 5.70 | Toegang tot gevoelige gegevens      | \n| CVE-2025-24063 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29970 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29837 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Scripting Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30397 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Hardware Lab Kit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-27488 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29959 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29960 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29830 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29832 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29835 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29836 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29958 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2025-29961 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-30388 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRole: Windows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29955 | 6.20 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWeb Threat Defense (WTD.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29971 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Gateway Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29967 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-30394 | 5.90 | Denial-of-Service                   | \n| CVE-2025-26677 | 7.50 | Denial-of-Service                   | \n| CVE-2025-29831 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nUniversal Print Management Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29841 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29964 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29840 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29962 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2025-29963 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Machine Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29833 | 7.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29956 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-32701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2025-32706 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2025-30385 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-27468 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Fundamentals: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29969 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29954 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29957 | 6.20 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nUrlMon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-29842 | 7.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Sensitive Data Storage in Improperly Locked Memory",
        "title": "CWE-591"
      },
      {
        "category": "general",
        "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
        "title": "CWE-59"
      },
      {
        "category": "general",
        "text": "Integer Underflow (Wrap or Wraparound)",
        "title": "CWE-191"
      },
      {
        "category": "general",
        "text": "Buffer Over-read",
        "title": "CWE-126"
      },
      {
        "category": "general",
        "text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
        "title": "CWE-349"
      },
      {
        "category": "general",
        "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
        "title": "CWE-367"
      },
      {
        "category": "general",
        "text": "Use of Uninitialized Resource",
        "title": "CWE-908"
      },
      {
        "category": "general",
        "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
        "title": "CWE-843"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Windows",
    "tracking": {
      "current_release_date": "2025-05-13T19:47:12.555983Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0159",
      "initial_release_date": "2025-05-13T19:47:12.555983Z",
      "revision_history": [
        {
          "date": "2025-05-13T19:47:12.555983Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835605",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22621.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22621.5335",
                      "product_id": "CSAFPID-2835604",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 22H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22621.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22621.5335",
                      "product_id": "CSAFPID-2835603",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 22H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835602",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835601",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854",
                      "product_id": "CSAFPID-2835600",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 21H2 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.20348.3692",
                    "product": {
                      "name": "vers:microsoft/10.0.20348.3692",
                      "product_id": "CSAFPID-2835599",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.3692:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2022 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835596",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2019"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835597",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2019 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835620",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8066:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2016 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835618",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1607 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835617",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1607 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.10240.21014",
                    "product": {
                      "name": "vers:microsoft/10.0.10240.21014",
                      "product_id": "CSAFPID-2835616",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.10240.21014",
                    "product": {
                      "name": "vers:microsoft/10.0.10240.21014",
                      "product_id": "CSAFPID-2835615",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-2835634",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_hlk_2025:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows HLK for Windows Server 2025"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835613",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 24H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835612",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 24H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22631.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22631.5335",
                      "product_id": "CSAFPID-2835610",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 23H2 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.22631.5335",
                    "product": {
                      "name": "vers:microsoft/10.0.22631.5335",
                      "product_id": "CSAFPID-2835609",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 11 Version 23H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835607",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19045.5854",
                    "product": {
                      "name": "vers:microsoft/10.0.19045.5854",
                      "product_id": "CSAFPID-2835606",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854:*:*:*:*:*:arm64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 22H2 for ARM64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835595",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1809 for x64-based Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.17763.7314",
                    "product": {
                      "name": "vers:microsoft/10.0.17763.7314",
                      "product_id": "CSAFPID-2835594",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 Version 1809 for 32-bit Systems"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/unknown",
                    "product": {
                      "name": "vers:microsoft/unknown",
                      "product_id": "CSAFPID-2835644",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_hlk_2019:*:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows HLK for Windows Server 2019"
              }
            ],
            "category": "product_family",
            "name": "Windows"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.19044.5854 arm",
                    "product": {
                      "name": "vers:microsoft/10.0.19044.5854 arm",
                      "product_id": "CSAFPID-2835574"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows 10 21h2"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.14393.8066",
                    "product": {
                      "name": "vers:microsoft/10.0.14393.8066",
                      "product_id": "CSAFPID-2835563"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2016"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/10.0.26100.4061",
                    "product": {
                      "name": "vers:microsoft/10.0.26100.4061",
                      "product_id": "CSAFPID-2835557"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2025"
              }
            ],
            "category": "product_family",
            "name": "Microsoft"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                "product": {
                  "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                  "product_id": "CSAFPID-2835224"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                "product": {
                  "name": "vers:unknown/6.3.9600.0|\u003c6.3.9600.22577",
                  "product_id": "CSAFPID-2835225"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2012 R2 (Server Core installation)"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.2.9200.25475",
                    "product": {
                      "name": "vers:microsoft/6.2.9200.25475",
                      "product_id": "CSAFPID-2835627",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25475:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2012"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.1.7601.27729",
                    "product": {
                      "name": "vers:microsoft/6.1.7601.27729",
                      "product_id": "CSAFPID-2835625",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.1.7601.27729",
                    "product": {
                      "name": "vers:microsoft/6.1.7601.27729",
                      "product_id": "CSAFPID-2835626",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835624",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x86:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835621",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for 32-bit Systems Service Pack 2"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:microsoft/6.0.6003.23279",
                    "product": {
                      "name": "vers:microsoft/6.0.6003.23279",
                      "product_id": "CSAFPID-2835622",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279:*:*:*:*:*:x64:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"
              }
            ],
            "category": "product_family",
            "name": "ESU"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/10.0.25398.0|\u003c10.0.25398.1611",
                "product": {
                  "name": "vers:unknown/10.0.25398.0|\u003c10.0.25398.1611",
                  "product_id": "CSAFPID-2835218"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/10.0.26100.0|\u003c10.0.26100.4061",
                "product": {
                  "name": "vers:unknown/10.0.26100.0|\u003c10.0.26100.4061",
                  "product_id": "CSAFPID-2835217"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Server 2025 (Server Core installation)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/1.0.0|\u003c16.97.25042725",
                "product": {
                  "name": "vers:unknown/1.0.0|\u003c16.97.25042725",
                  "product_id": "CSAFPID-2835429"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office LTSC for Mac 2024"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.0.14326.22502",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.0.14326.22502",
                  "product_id": "CSAFPID-2835439"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office for Universal"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.0.18827.20000",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.0.18827.20000",
                  "product_id": "CSAFPID-2835428"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office for Android"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/16.0.1|\u003c16.97.25042725",
                "product": {
                  "name": "vers:unknown/16.0.1|\u003c16.97.25042725",
                  "product_id": "CSAFPID-2835427"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Office LTSC for Mac 2021"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1260618"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Windows Server 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1322604"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Windows Server 2012 R2 (Server Core installation)"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-29959",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29959",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29959.json"
        }
      ],
      "title": "CVE-2025-29959"
    },
    {
      "cve": "CVE-2025-29960",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29960",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29960.json"
        }
      ],
      "title": "CVE-2025-29960"
    },
    {
      "cve": "CVE-2025-29964",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29964",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29964.json"
        }
      ],
      "title": "CVE-2025-29964"
    },
    {
      "cve": "CVE-2025-29966",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29966",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29966.json"
        }
      ],
      "title": "CVE-2025-29966"
    },
    {
      "cve": "CVE-2025-29967",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29967",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29967.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29967"
    },
    {
      "cve": "CVE-2025-29969",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29969",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29969.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29969"
    },
    {
      "cve": "CVE-2025-27468",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27468",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27468.json"
        }
      ],
      "title": "CVE-2025-27468"
    },
    {
      "cve": "CVE-2025-30400",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30400",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30400.json"
        }
      ],
      "title": "CVE-2025-30400"
    },
    {
      "cve": "CVE-2025-32701",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32701",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32701.json"
        }
      ],
      "title": "CVE-2025-32701"
    },
    {
      "cve": "CVE-2025-32706",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32706",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32706.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-32706"
    },
    {
      "cve": "CVE-2025-32709",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32709",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32709.json"
        }
      ],
      "title": "CVE-2025-32709"
    },
    {
      "cve": "CVE-2025-29829",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29829",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29829.json"
        }
      ],
      "title": "CVE-2025-29829"
    },
    {
      "cve": "CVE-2025-29830",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29830",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29830.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29830"
    },
    {
      "cve": "CVE-2025-29832",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29832",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29832.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29832"
    },
    {
      "cve": "CVE-2025-29833",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
          "title": "CWE-367"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29833",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29833.json"
        }
      ],
      "title": "CVE-2025-29833"
    },
    {
      "cve": "CVE-2025-29835",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29835",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29835.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29835"
    },
    {
      "cve": "CVE-2025-29836",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29836",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29836.json"
        }
      ],
      "title": "CVE-2025-29836"
    },
    {
      "cve": "CVE-2025-29837",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
          "title": "CWE-59"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29837",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29837.json"
        }
      ],
      "title": "CVE-2025-29837"
    },
    {
      "cve": "CVE-2025-29839",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29839",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29839.json"
        }
      ],
      "title": "CVE-2025-29839"
    },
    {
      "cve": "CVE-2025-29840",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29840",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29840.json"
        }
      ],
      "title": "CVE-2025-29840"
    },
    {
      "cve": "CVE-2025-29842",
      "cwe": {
        "id": "CWE-349",
        "name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
          "title": "CWE-349"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29842",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29842.json"
        }
      ],
      "title": "CVE-2025-29842"
    },
    {
      "cve": "CVE-2025-29954",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29954",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29954.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29954"
    },
    {
      "cve": "CVE-2025-29956",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Over-read",
          "title": "CWE-126"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29956",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29956.json"
        }
      ],
      "title": "CVE-2025-29956"
    },
    {
      "cve": "CVE-2025-29957",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29957",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29957.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29957"
    },
    {
      "cve": "CVE-2025-29958",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Uninitialized Resource",
          "title": "CWE-908"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29958",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29958.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29958"
    },
    {
      "cve": "CVE-2025-29961",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29961",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29961.json"
        }
      ],
      "title": "CVE-2025-29961"
    },
    {
      "cve": "CVE-2025-29962",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29962",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29962.json"
        }
      ],
      "title": "CVE-2025-29962"
    },
    {
      "cve": "CVE-2025-29963",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29963",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29963.json"
        }
      ],
      "title": "CVE-2025-29963"
    },
    {
      "cve": "CVE-2025-29974",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "other",
          "text": "Integer Underflow (Wrap or Wraparound)",
          "title": "CWE-191"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29974",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29974.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29974"
    },
    {
      "cve": "CVE-2025-30385",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30385",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30385.json"
        }
      ],
      "title": "CVE-2025-30385"
    },
    {
      "cve": "CVE-2025-30388",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30388",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30388.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-30388"
    },
    {
      "cve": "CVE-2025-30397",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30397",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30397.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-30397"
    },
    {
      "cve": "CVE-2025-32707",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32707",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-32707.json"
        }
      ],
      "title": "CVE-2025-32707"
    },
    {
      "cve": "CVE-2025-24063",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-24063",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24063.json"
        }
      ],
      "title": "CVE-2025-24063"
    },
    {
      "cve": "CVE-2025-29968",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29968",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29968.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29968"
    },
    {
      "cve": "CVE-2025-30394",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "other",
          "text": "Sensitive Data Storage in Improperly Locked Memory",
          "title": "CWE-591"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30394",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30394.json"
        }
      ],
      "title": "CVE-2025-30394"
    },
    {
      "cve": "CVE-2025-26677",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-26677",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26677.json"
        }
      ],
      "title": "CVE-2025-26677"
    },
    {
      "cve": "CVE-2025-29831",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29831",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29831.json"
        }
      ],
      "title": "CVE-2025-29831"
    },
    {
      "cve": "CVE-2025-29841",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29841",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29841.json"
        }
      ],
      "title": "CVE-2025-29841"
    },
    {
      "cve": "CVE-2025-29971",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29971",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29971.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29971"
    },
    {
      "cve": "CVE-2025-29970",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29970",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29970.json"
        }
      ],
      "title": "CVE-2025-29970"
    },
    {
      "cve": "CVE-2025-29838",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29838",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29838.json"
        }
      ],
      "title": "CVE-2025-29838"
    },
    {
      "cve": "CVE-2025-29955",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-29955",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-29955.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2835605",
            "CSAFPID-2835604",
            "CSAFPID-2835603",
            "CSAFPID-2835574",
            "CSAFPID-2835602",
            "CSAFPID-2835601",
            "CSAFPID-2835600",
            "CSAFPID-2835599",
            "CSAFPID-1260618",
            "CSAFPID-2835596",
            "CSAFPID-2835597",
            "CSAFPID-1322604",
            "CSAFPID-2835224",
            "CSAFPID-2835225",
            "CSAFPID-2835627",
            "CSAFPID-2835625",
            "CSAFPID-2835626",
            "CSAFPID-2835624",
            "CSAFPID-2835621",
            "CSAFPID-2835622",
            "CSAFPID-2835620",
            "CSAFPID-2835563",
            "CSAFPID-2835618",
            "CSAFPID-2835617",
            "CSAFPID-2835616",
            "CSAFPID-2835615",
            "CSAFPID-2835634",
            "CSAFPID-2835613",
            "CSAFPID-2835612",
            "CSAFPID-2835218",
            "CSAFPID-2835610",
            "CSAFPID-2835609",
            "CSAFPID-2835217",
            "CSAFPID-2835607",
            "CSAFPID-2835606",
            "CSAFPID-2835595",
            "CSAFPID-2835594",
            "CSAFPID-2835557",
            "CSAFPID-2835429",
            "CSAFPID-2835439",
            "CSAFPID-2835428",
            "CSAFPID-2835427",
            "CSAFPID-2835644"
          ]
        }
      ],
      "title": "CVE-2025-29955"
    },
    {
      "cve": "CVE-2025-27488",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2835605",
          "CSAFPID-2835604",
          "CSAFPID-2835603",
          "CSAFPID-2835574",
          "CSAFPID-2835602",
          "CSAFPID-2835601",
          "CSAFPID-2835600",
          "CSAFPID-2835599",
          "CSAFPID-1260618",
          "CSAFPID-2835596",
          "CSAFPID-2835597",
          "CSAFPID-1322604",
          "CSAFPID-2835224",
          "CSAFPID-2835225",
          "CSAFPID-2835627",
          "CSAFPID-2835625",
          "CSAFPID-2835626",
          "CSAFPID-2835624",
          "CSAFPID-2835621",
          "CSAFPID-2835622",
          "CSAFPID-2835620",
          "CSAFPID-2835563",
          "CSAFPID-2835618",
          "CSAFPID-2835617",
          "CSAFPID-2835616",
          "CSAFPID-2835615",
          "CSAFPID-2835634",
          "CSAFPID-2835613",
          "CSAFPID-2835612",
          "CSAFPID-2835218",
          "CSAFPID-2835610",
          "CSAFPID-2835609",
          "CSAFPID-2835217",
          "CSAFPID-2835607",
          "CSAFPID-2835606",
          "CSAFPID-2835595",
          "CSAFPID-2835594",
          "CSAFPID-2835557",
          "CSAFPID-2835429",
          "CSAFPID-2835439",
          "CSAFPID-2835428",
          "CSAFPID-2835427",
          "CSAFPID-2835644"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-27488",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27488.json"
        }
      ],
      "title": "CVE-2025-27488"
    }
  ]
}

CVE-2025-24063 (GCVE-0-2025-24063)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:59 – Updated: 2026-02-13 19:21

Title

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Summary

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Severity ?

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

25 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-24063",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T17:38:18.631256Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T17:38:27.421Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:38.053Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24063"
        }
      ],
      "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-24063",
    "datePublished": "2025-05-13T16:59:17.334Z",
    "dateReserved": "2025-01-16T23:11:19.734Z",
    "dateUpdated": "2026-02-13T19:21:38.053Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-26677 (GCVE-0-2025-26677)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Summary

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

8 products

Vendor	Product	Version
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-26677",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T18:14:52.895818Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T18:15:06.650Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:16.385Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26677"
        }
      ],
      "title": "Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-26677",
    "datePublished": "2025-05-13T16:58:54.471Z",
    "dateReserved": "2025-02-12T22:35:41.550Z",
    "dateUpdated": "2026-02-13T19:21:16.385Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27468 (GCVE-0-2025-27468)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-26 18:28

Title

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Summary

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Severity ?

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-269 - Improper Privilege Management

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

21 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27468",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T04:00:18.983456Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:28:32.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:06.001Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Kernel-Mode Driver Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27468"
        }
      ],
      "title": "Windows Kernel-Mode Driver Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-27468",
    "datePublished": "2025-05-13T16:58:47.262Z",
    "dateReserved": "2025-02-26T14:42:05.975Z",
    "dateUpdated": "2026-02-26T18:28:32.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27488 (GCVE-0-2025-27488)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

Summary

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

Severity ?

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-798 - Use of Hard-coded Credentials

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

11 products

Vendor	Product	Version
Microsoft	Windows 10 HLK version 20H2	Affected: 1.0.0 , < 10.1.19041.5609 (custom)
Microsoft	Windows 10 HLK version 21H1	Affected: 1.0.0 , < 10.1.19041.5609 (custom)
Microsoft	Windows 10 HLK version 21H2	Affected: 1.0.0 , < 10.1.19041.5609 (custom)
Microsoft	Windows 10 HLK Version 22H2	Affected: 1.0.0 , < 10.1.19041.5609 (custom)
Microsoft	Windows 11 HLK 22H2	Affected: 1.0.0 , < 10.1.22621.5040 (custom)
Microsoft	Windows 11 HLK 24H2	Affected: 1.0.0 , < 10.1.26100.3478 (custom)
Microsoft	Windows HLK for Windows 10 version 2004	Affected: 1.0.0 , < 10.1.19041.5609 (custom)
Microsoft	Windows HLK for Windows Server 2019	Affected: 1.0.0 , < 10.1.17763.7010 (custom)
Microsoft	Windows HLK for Windows Server 2022	Affected: 1.0.0 , < 10.1.20348.3330 (custom)
Microsoft	Windows HLK for Windows Server 2025	Affected: 1.0.0 , < 10.1.26100.3478 (custom)
Microsoft	Windows HLK, version 1809	Affected: 1.0.0 , < 10.1.17763.7010 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27488",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T18:13:48.880230Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T18:13:57.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Windows 10 HLK version 20H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.19041.5609",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows 10 HLK version 21H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.19041.5609",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows 10 HLK version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.19041.5609",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows 10 HLK Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.19041.5609",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows 11 HLK 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.22621.5040",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows 11 HLK 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.26100.3478",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows HLK for Windows 10 version 2004",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.19041.5609",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows HLK for Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.17763.7010",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows HLK for Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.20348.3330",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows HLK for Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.26100.3478",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Windows HLK, version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.1.17763.7010",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_hlk_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.26100.3478",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_hlk_24H2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.26100.3478",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_1809:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.17763.7010",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_21H1:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.19041.5609",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_hlk_22H2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.22621.5040",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_hlk_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.20348.3330",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_20H2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.19041.5609",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_22H2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.19041.5609",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_21H2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.19041.5609",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_hlk_2004:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.19041.5609",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_hlk_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.1.17763.7010",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798: Use of Hard-coded Credentials",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:16.843Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488"
        }
      ],
      "title": "Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-27488",
    "datePublished": "2025-05-13T16:58:55.126Z",
    "dateReserved": "2025-02-26T14:42:05.978Z",
    "dateUpdated": "2026-02-13T19:21:16.843Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29829 (GCVE-0-2025-29829)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability

Summary

Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.

Severity ?

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE

CWE-908 - Use of Uninitialized Resource

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

17 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29829",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T18:09:45.457117Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T18:09:50.339Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-908",
              "description": "CWE-908: Use of Uninitialized Resource",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:17.955Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29829"
        }
      ],
      "title": "Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29829",
    "datePublished": "2025-05-13T16:58:56.323Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-13T19:21:17.955Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29830 (GCVE-0-2025-29830)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Summary

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE

CWE-908 - Use of Uninitialized Resource

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

25 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29830",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T18:08:52.630374Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T18:09:02.620Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-908",
              "description": "CWE-908: Use of Uninitialized Resource",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:18.496Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29830"
        }
      ],
      "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29830",
    "datePublished": "2025-05-13T16:58:56.830Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-13T19:21:18.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29831 (GCVE-0-2025-29831)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-26 18:28

Title

Windows Remote Desktop Services Remote Code Execution Vulnerability

Summary

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-416 - Use After Free

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

14 products

Vendor	Product	Version
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T04:00:25.944403Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:28:30.037Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:19.114Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Remote Desktop Services Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29831"
        }
      ],
      "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29831",
    "datePublished": "2025-05-13T16:58:57.400Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-26T18:28:30.037Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29832 (GCVE-0-2025-29832)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Summary

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE

CWE-125 - Out-of-bounds Read

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

25 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Affected: 6.0.6003.0 , < 6.0.6003.23279 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29832",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T18:08:05.927024Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T18:08:13.561Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.23279",
              "status": "affected",
              "version": "6.0.6003.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.0.6003.23279",
                  "versionStartIncluding": "6.0.6003.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:19.758Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29832"
        }
      ],
      "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29832",
    "datePublished": "2025-05-13T16:58:58.027Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-13T19:21:19.758Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29833 (GCVE-0-2025-29833)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-26 18:28

Title

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

Summary

Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.

Severity ?

7.7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

21 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29833",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T04:00:28.911663Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:28:29.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:20.352Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29833"
        }
      ],
      "title": "Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29833",
    "datePublished": "2025-05-13T16:58:58.731Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-26T18:28:29.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-29835 (GCVE-0-2025-29835)

Vulnerability from cvelistv5 – Published: 2025-05-13 16:58 – Updated: 2026-02-13 19:21

Title

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Summary

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

CWE

CWE-125 - Out-of-bounds Read
CWE-476 - NULL Pointer Dereference

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

23 products

Vendor	Product	Version
Microsoft	Windows 10 Version 1507	Affected: 10.0.10240.0 , < 10.0.10240.21014 (custom)
Microsoft	Windows 10 Version 1607	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows 10 Version 1809	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows 10 Version 21H2	Affected: 10.0.19044.0 , < 10.0.19044.5854 (custom)
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.5854 (custom)
Microsoft	Windows 11 version 22H2	Affected: 10.0.22621.0 , < 10.0.22621.5335 (custom)
Microsoft	Windows 11 version 22H3	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 23H2	Affected: 10.0.22631.0 , < 10.0.22631.5335 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.1.7601.0 , < 6.1.7601.27729 (custom)
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25475 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22577 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8066 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7314 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.3692 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1611 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.4061 (custom)

Date Public ?

2025-05-13 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-29835",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-13T20:08:21.951735Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-13T20:13:06.111Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1507",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10240.21014",
              "status": "affected",
              "version": "10.0.10240.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1607",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 1809",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 21H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19044.5854",
              "status": "affected",
              "version": "10.0.19044.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.5854",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22621.5335",
              "status": "affected",
              "version": "10.0.22621.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems"
          ],
          "product": "Windows 11 version 22H3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 23H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.22631.5335",
              "status": "affected",
              "version": "10.0.22631.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.27729",
              "status": "affected",
              "version": "6.1.7601.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25475",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22577",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8066",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7314",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.3692",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1611",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.4061",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7314",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.3692",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.19044.5854",
                  "versionStartIncluding": "10.0.19044.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22621.5335",
                  "versionStartIncluding": "10.0.22621.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.5854",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.22631.5335",
                  "versionStartIncluding": "10.0.22631.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1611",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.4061",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.10240.21014",
                  "versionStartIncluding": "10.0.10240.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8066",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.1.7601.27729",
                  "versionStartIncluding": "6.1.7601.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25475",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22577",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-05-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-13T19:21:20.976Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Remote Access Connection Manager Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29835"
        }
      ],
      "title": "Windows Remote Access Connection Manager Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-29835",
    "datePublished": "2025-05-13T16:58:59.407Z",
    "dateReserved": "2025-03-11T22:56:43.944Z",
    "dateUpdated": "2026-02-13T19:21:20.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Product	Identifier	Version
vers:microsoft/10.0.19045.5854 Microsoft / Windows / Windows 10 Version 22H2 for x64-based Systems	`cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854::::::x64:`	vers:microsoft/10.0.19045.5854
vers:microsoft/10.0.22621.5335 Microsoft / Windows / Windows 11 Version 22H2 for x64-based Systems	`cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335::::::x64:`	vers:microsoft/10.0.22621.5335
vers:microsoft/10.0.22621.5335 Microsoft / Windows / Windows 11 Version 22H2 for ARM64-based Systems	`cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.5335::::::arm64:`	vers:microsoft/10.0.22621.5335
vers:microsoft/10.0.19044.5854 arm Microsoft / Microsoft / Windows 10 21h2		vers:microsoft/10.0.19044.5854 arm
vers:microsoft/10.0.19044.5854 Microsoft / Windows / Windows 10 Version 21H2 for x64-based Systems	`cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854::::::x64:`	vers:microsoft/10.0.19044.5854
vers:microsoft/10.0.19044.5854 Microsoft / Windows / Windows 10 Version 21H2 for ARM64-based Systems	`cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854::::::arm64:`	vers:microsoft/10.0.19044.5854
vers:microsoft/10.0.19044.5854 Microsoft / Windows / Windows 10 Version 21H2 for 32-bit Systems	`cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.5854::::::x86:`	vers:microsoft/10.0.19044.5854
vers:microsoft/10.0.20348.3692 Microsoft / Windows / Windows Server 2022 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.3692:::::::*`	vers:microsoft/10.0.20348.3692
vers:unknown/* IBM / Microsoft Windows Server 2022		vers:unknown/*
vers:microsoft/10.0.17763.7314 Microsoft / Windows / Windows Server 2019	`cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:::::::*`	vers:microsoft/10.0.17763.7314
vers:microsoft/10.0.17763.7314 Microsoft / Windows / Windows Server 2019 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.7314:::::::*`	vers:microsoft/10.0.17763.7314
vers:unknown/* IBM / Microsoft Windows Server 2012 R2 (Server Core installation)		vers:unknown/*
vers:unknown/6.3.9600.0\|<6.3.9600.22577 Microsoft / Windows Server 2012 R2		vers:unknown/6.3.9600.0\|<6.3.9600.22577
vers:unknown/6.3.9600.0\|<6.3.9600.22577 Microsoft / Windows Server 2012 R2 (Server Core installation)		vers:unknown/6.3.9600.0\|<6.3.9600.22577
vers:microsoft/6.2.9200.25475 Microsoft / ESU / Windows Server 2012	`cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25475::::::x64:`	vers:microsoft/6.2.9200.25475
vers:microsoft/6.1.7601.27729 Microsoft / ESU / Windows Server 2008 R2 for x64-based Systems Service Pack 1	`cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729::::::x64:`	vers:microsoft/6.1.7601.27729
vers:microsoft/6.1.7601.27729 Microsoft / ESU / Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27729::::::x64:`	vers:microsoft/6.1.7601.27729
vers:microsoft/6.0.6003.23279 Microsoft / ESU / Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279::::::x86:`	vers:microsoft/6.0.6003.23279
vers:microsoft/6.0.6003.23279 Microsoft / ESU / Windows Server 2008 for 32-bit Systems Service Pack 2	`cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279::::::x64:`	vers:microsoft/6.0.6003.23279
vers:microsoft/6.0.6003.23279 Microsoft / ESU / Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.23279::::::x64:`	vers:microsoft/6.0.6003.23279
vers:microsoft/10.0.14393.8066 Microsoft / Windows / Windows Server 2016 (Server Core installation)	`cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8066:::::::*`	vers:microsoft/10.0.14393.8066
vers:microsoft/10.0.14393.8066 Microsoft / Microsoft / Windows Server 2016		vers:microsoft/10.0.14393.8066
vers:microsoft/10.0.14393.8066 Microsoft / Windows / Windows 10 Version 1607 for x64-based Systems	`cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066::::::x64:`	vers:microsoft/10.0.14393.8066
vers:microsoft/10.0.14393.8066 Microsoft / Windows / Windows 10 Version 1607 for 32-bit Systems	`cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.8066::::::x86:`	vers:microsoft/10.0.14393.8066
vers:microsoft/10.0.10240.21014 Microsoft / Windows / Windows 10 for x64-based Systems	`cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014::::::x64:`	vers:microsoft/10.0.10240.21014
vers:microsoft/10.0.10240.21014 Microsoft / Windows / Windows 10 for 32-bit Systems	`cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.21014::::::x86:`	vers:microsoft/10.0.10240.21014
vers:microsoft/unknown Microsoft / Windows / Windows HLK for Windows Server 2025	`cpe:2.3:o:microsoft:windows_server_hlk_2025::::::::`	vers:microsoft/unknown
vers:microsoft/10.0.26100.4061 Microsoft / Windows / Windows 11 Version 24H2 for x64-based Systems	`cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061::::::x64:`	vers:microsoft/10.0.26100.4061
vers:microsoft/10.0.26100.4061 Microsoft / Windows / Windows 11 Version 24H2 for ARM64-based Systems	`cpe:2.3:o:microsoft:windows_11_24H2:10.0.26100.4061::::::arm64:`	vers:microsoft/10.0.26100.4061
vers:unknown/10.0.25398.0\|<10.0.25398.1611 Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)		vers:unknown/10.0.25398.0\|<10.0.25398.1611
vers:microsoft/10.0.22631.5335 Microsoft / Windows / Windows 11 Version 23H2 for x64-based Systems	`cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335::::::x64:`	vers:microsoft/10.0.22631.5335
vers:microsoft/10.0.22631.5335 Microsoft / Windows / Windows 11 Version 23H2 for ARM64-based Systems	`cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.5335::::::arm64:`	vers:microsoft/10.0.22631.5335
vers:unknown/10.0.26100.0\|<10.0.26100.4061 Microsoft / Windows Server 2025 (Server Core installation)		vers:unknown/10.0.26100.0\|<10.0.26100.4061
vers:microsoft/10.0.19045.5854 Microsoft / Windows / Windows 10 Version 22H2 for 32-bit Systems	`cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854::::::x86:`	vers:microsoft/10.0.19045.5854
vers:microsoft/10.0.19045.5854 Microsoft / Windows / Windows 10 Version 22H2 for ARM64-based Systems	`cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.5854::::::arm64:`	vers:microsoft/10.0.19045.5854
vers:microsoft/10.0.17763.7314 Microsoft / Windows / Windows 10 Version 1809 for x64-based Systems	`cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314::::::x64:`	vers:microsoft/10.0.17763.7314
vers:microsoft/10.0.17763.7314 Microsoft / Windows / Windows 10 Version 1809 for 32-bit Systems	`cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.7314::::::x86:`	vers:microsoft/10.0.17763.7314
vers:microsoft/10.0.26100.4061 Microsoft / Microsoft / Windows Server 2025		vers:microsoft/10.0.26100.4061
vers:unknown/1.0.0\|<16.97.25042725 Microsoft / Microsoft Office LTSC for Mac 2024		vers:unknown/1.0.0\|<16.97.25042725
vers:unknown/16.0.1\|<16.0.14326.22502 Microsoft / Microsoft Office for Universal		vers:unknown/16.0.1\|<16.0.14326.22502
vers:unknown/16.0.1\|<16.0.18827.20000 Microsoft / Microsoft Office for Android		vers:unknown/16.0.1\|<16.0.18827.20000
vers:unknown/16.0.1\|<16.97.25042725 Microsoft / Microsoft Office LTSC for Mac 2021		vers:unknown/16.0.1\|<16.97.25042725
vers:microsoft/unknown Microsoft / Windows / Windows HLK for Windows Server 2019	`cpe:2.3:o:microsoft:windows_server_hlk_2019::::::::`	vers:microsoft/unknown

Action not permitted

NCSC-2025-0159

CVE-2025-24063 (GCVE-0-2025-24063)

CVE-2025-26677 (GCVE-0-2025-26677)

CVE-2025-27468 (GCVE-0-2025-27468)

CVE-2025-27488 (GCVE-0-2025-27488)

CVE-2025-29829 (GCVE-0-2025-29829)

CVE-2025-29830 (GCVE-0-2025-29830)

CVE-2025-29831 (GCVE-0-2025-29831)

CVE-2025-29832 (GCVE-0-2025-29832)

CVE-2025-29833 (GCVE-0-2025-29833)

CVE-2025-29835 (GCVE-0-2025-29835)

Tags

Sightings

Nomenclature