Information Disclosure in Windows User-Mode Driver Framework by Microsoft
CVE-2025-49664
5.5MEDIUM
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-49664?
An exposure of sensitive information to unauthorized actors has been identified in the Windows User-Mode Driver Framework Host. This vulnerability allows an authorized attacker to gain access to private data locally, potentially leading to unauthorized information disclosure. It is crucial for users and organizations to stay informed about this issue and implement necessary precautions to safeguard sensitive information.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558