Null Pointer Dereference Vulnerability in Windows Drivers by Microsoft
CVE-2025-29838

7.4HIGH

Key Information:

Vendor

Microsoft
Status
Windows Server 2025 (server Core Installation)
Windows 11 Version 24h2
Windows Server 2025
Vendor
CVE Published:
13 May 2025
đź”” Create Microsoft Vulnerability Alert

What is CVE-2025-29838?

A null pointer dereference vulnerability exists within Windows Drivers, enabling unauthorized attackers to elevate privileges on affected systems. By exploiting this flaw, a malicious actor can potentially gain access to sensitive system resources, posing significant security risks to users and organizations. It is imperative to implement patches and updates provided by Microsoft to mitigate this vulnerability and enhance the overall security posture.

Affected Version(s)

Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.4061

Windows Server 2025 (Server Core installation) x64-based Systems 10.0.26100.0 < 10.0.26100.4061

Windows Server 2025 x64-based Systems 10.0.26100.0 < 10.0.26100.4061

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-29838 : Null Pointer Dereference Vulnerability in Windows Drivers by Microsoft