NetSight
medium5.1

CVE-2025-55679

Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.

Impact

Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.7919
MicrosoftWindows 10 21h2
before 10.0.19044.6456
MicrosoftWindows 10 22h2
before 10.0.19045.6456
MicrosoftWindows 11 22h2
before 10.0.22621.6060
MicrosoftWindows 11 23h2
before 10.0.22631.6060
MicrosoftWindows 11 24h2
before 10.0.26100.6899
MicrosoftWindows 11 25h2
before 10.0.26200.6899
MicrosoftWindows Server 2019
before 10.0.17763.7919
MicrosoftWindows Server 2022
before 10.0.20348.4294
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1913
MicrosoftWindows Server 2025
before 10.0.26100.6899

Weakness classification

References