CVE-2025-49760CWE-73

Windows Storage Spoofing Vulnerability

Low · published July 8, 2025

CVSS v3.1

3.5

EPSS

1%

Percentile

73.4

In the wild

Unconfirmed

What it is

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.

The record

Technical detail

CVSS v3.1: 3.5 · LOW
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.01462 · 73.4th percentile
Weakness: CWE-73 · External Control of File Name or Path
Published: 2025-07-08T16:57Z

EPSS history

Timeline

08 JUL 16:57Z
Windows Storage Spoofing Vulnerability
cvelistv5