CVE-2025-47980

EPSS 0.57%
Veröffentlicht 08.07.2025 16:57:30
Zuletzt bearbeitet 14.07.2025 17:33:19
Erkennungen
Login

Windows Imaging Component Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 21 VulnDex Vulnerability Enrichment 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 1507 HwPlatform x64 Version < 10.0.10240.21073

Microsoft ≫ Windows 10 1507 HwPlatform x86 Version < 10.0.10240.21073

Microsoft ≫ Windows 10 1607 HwPlatform x64 Version < 10.0.14393.8246

Microsoft ≫ Windows 10 1607 HwPlatform x86 Version < 10.0.14393.8246

Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.7558

Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.7558

Microsoft ≫ Windows 10 21h2 Version < 10.0.19044.6093

Microsoft ≫ Windows 10 22h2 Version < 10.0.19045.6093

Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.5624

Microsoft ≫ Windows 11 23h2 Version < 10.0.22631.5624

Microsoft ≫ Windows 11 24h2 Version < 10.0.26100.4652

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86

Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64

Microsoft ≫ Windows Server 2012 Version -

Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ Windows Server 2016 Version < 10.0.14393.8246

Microsoft ≫ Windows Server 2019 Version < 10.0.17763.7558

Microsoft ≫ Windows Server 2022 Version < 10.0.20348.3932

Microsoft ≫ Windows Server 2022 23h2 Version < 10.0.25398.1732

Microsoft ≫ Windows Server 2025 Version < 10.0.26100.4652

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.57%	0.446

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	6.2	2.5	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47980

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-47980

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-47980

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-47980

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-47980