5.5
CVE-2025-32722
- EPSS 0.99%
- Veröffentlicht 10.06.2025 17:02:15
- Zuletzt bearbeitet 10.07.2025 14:01:36
- Erkennungen
Windows Storage Port Driver Information Disclosure Vulnerability
Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 HwPlatform x64 Version < 10.0.10240.21034
Microsoft ≫ Windows 10 1507 HwPlatform x86 Version < 10.0.10240.21034
Microsoft ≫ Windows 10 1607 HwPlatform x64 Version < 10.0.14393.8148
Microsoft ≫ Windows 10 1607 HwPlatform x86 Version < 10.0.14393.8148
Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.7434
Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.7434
Microsoft ≫ Windows 10 21h2 Version < 10.0.19044.5965
Microsoft ≫ Windows 10 22h2 Version < 10.0.19045.5965
Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.5472
Microsoft ≫ Windows 11 23h2 Version < 10.0.22631.5472
Microsoft ≫ Windows 11 24h2 Version < 10.0.26100.4270
Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.8148
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.7434
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.3745
Microsoft ≫ Windows Server 2022 23h2 Version < 10.0.25398.1665
Microsoft ≫ Windows Server 2025 Version < 10.0.26100.4270
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.587 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32722