CVE-2025-65001CWE-787

CVE-2025-65001

High · published November 12, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

⚡ A vulnerable driver could open the door to chaos! Fujitsu's fbiosdrv.sys, in versions before 2.5.0.0, poses a significant threat to your system's confidentiality, integrity, and availability. 🔥 Think of fbiosdrv.sys as a receptionist at a secure building. If they don't properly check IDs at the door, anyone could waltz in and mess with the important files stored inside, potentially leading to a total security breach! An attacker could exploit this vulnerability to gain unauthorized access, tamper with your data, or even disrupt service entirely. Imagine losing critical information or having your system go offline—absolutely devastating for any operation!

Put simply

Think of fbiosdrv.sys as a receptionist at a secure building. If they don't properly check IDs at the door, anyone could waltz in and mess with the important files stored inside, potentially leading to a total security breach! This vulnerability stems from inadequate checks within the fbiosdrv.sys driver, allowing unauthorized access to sensitive system functionalities that could compromise core system operations.

What to do

An attacker could exploit this vulnerability to gain unauthorized access, tamper with your data, or even disrupt service entirely. Imagine losing critical information or having your system go offline—absolutely devastating for any operation! To protect your systems, immediately update fbiosdrv.sys to version 2.5.0.0 or later. Additionally, review your security policies to ensure strict access controls are in place. You've got this! Stay vigilant and follow these steps to fortify your defenses! 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-12T23:15Z
References (3)
EPSS history
Timeline
  • 12 NOV 00:00Z
    Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and availability
    cvelistv5