CVE-2025-60708CWE-822

Storvsp.sys Driver Denial of Service Vulnerability

Medium · published November 11, 2025

CVSS v3.1

6.5

EPSS

0%

Percentile

41.6

In the wild

Unconfirmed

What it is

Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.00494 · 41.6th percentile
Weakness: CWE-822 · Untrusted Pointer Dereference
Published: 2025-11-11T17:59Z

EPSS history

Timeline

11 NOV 17:59Z
Storvsp.sys Driver Denial of Service Vulnerability
cvelistv5