CVE-2025-48464CWE-200information-disclosure

CVE-2025-48464

Medium · published October 8, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00139 · 3.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-08T11:15Z
References (2)
https://tuxplorer.com/posts/dont-leave-me-outdated/ · 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-097/ · 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
EPSS history
Timeline
  • 08 OCT 06:50Z
    Exposure of Sensitive Information
    cvelistv5