Information Disclosure in Windows Storage Management Provider by Microsoft
CVE-2025-33060
5.5MEDIUM
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 10 June 2025
What is CVE-2025-33060?
An information disclosure vulnerability exists in the Windows Storage Management Provider, which could allow an attacker with authorized access to retrieve sensitive information locally. This vulnerability exploits an out-of-bounds read condition, enabling potential attackers to access data that should be protected.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21034
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8148
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7434