CVE-2025-29809

Published Apr 8, 2025

Last updated 9 days ago

Windows Kerberos

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-29809 is a security vulnerability affecting Windows Kerberos. It stems from the insecure storage of sensitive information, which could allow an authorized attacker to bypass security features locally. Successful exploitation of this vulnerability could allow a local attacker to leak Kerberos credentials. If Virtualization-Based Security (VBS) is in use, redeployment with an updated policy may be necessary after patching.

Description: Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.
Source: secure@microsoft.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.1
Impact score: 5.2
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-922

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 27

Overview

AI description

Risk scores

CVSS 3.1

Weaknesses

Social media

References