Improper XML External Entity Handling in Lexmark Printer Drivers for Windows
CVE-2025-4044

8.2HIGH

Key Information:

Vendor

Lexmark

Status
Universal Print Driver
Printer Software G2
Vendor
CVE Published:
19 August 2025

What is CVE-2025-4044?

An improper restriction in various Lexmark printer drivers for Windows enables attackers to exploit XML External Entity references. This vulnerability could lead to the disclosure of sensitive information, potentially exposing user data to an arbitrary URL. Users of affected versions are advised to apply necessary security updates and review security advisories for guidance.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Printer Software G2 Windows 0 < 2.17.0.0

Universal Print Driver Windows 0 < 3.0.6.0

References

https://www.lexmark.com/en_us/solutions/security/lexmark-...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.