CVE-2025-59284CWE-200information-disclosure

CVE-2025-59284

Low · published October 14, 2025

CVSS v3.1
3.3
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01026 · 63.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-14T21:16Z
Affected products (5)
ProductVersionsFixed in
microsoft/windows_11_22h2< 10.0.22621.606010.0.22621.6060
microsoft/windows_11_23h2< 10.0.22631.606010.0.22631.6060
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59284 · [email protected]
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows NTLM Spoofing Vulnerability
    cvelistv5