CVE-2025-29974CWE-125CWE-191

Windows Kernel Information Disclosure Vulnerability

Medium · published May 13, 2025

CVSS v3.1
5.7
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2025-05-13T16:59Z
EPSS history
Timeline
  • 13 MAY 16:59Z
    Windows Kernel Information Disclosure Vulnerability
    cvelistv5