7.4
CVE-2025-29838
- EPSS 0.32%
- Veröffentlicht 13.05.2025 16:59:01
- Zuletzt bearbeitet 19.05.2025 18:18:13
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
Windows ExecutionContext Driver Elevation of Privilege Vulnerability
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 11 24h2 HwPlatformarm64 Version < 10.0.26100.4061
Microsoft ≫ Windows 11 24h2 HwPlatformx64 Version < 10.0.26100.4061
Microsoft ≫ Windows Server 2025 Version < 10.0.26100.4061
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.554 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| secure@microsoft.com | 7.4 | 1.4 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.