Local Information Disclosure in SAP GUI for Windows by SAP

CVE-2025-42888

What is CVE-2025-42888?

The SAP GUI for Windows could allow a highly privileged user to access sensitive information stored in process memory during runtime. This vulnerability presents risks to confidentiality by enabling unauthorized local access to potentially sensitive data, while having no impact on the integrity or availability of the application. It is imperative for users to remain vigilant and apply security patches to mitigate this risk.

References