CVE-2025-50154

medium · 6.5

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

6.5

CVSS

25.6%

EPSS (exploit prob.)

98th

EPSS percentile

2025-08-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
microsoft	windows_10_1507	< 10.0.10240.21100
microsoft	windows_10_1507	< 10.0.10240.21100
microsoft	windows_10_1607	< 10.0.14393.8330
microsoft	windows_10_1607	< 10.0.14393.8330
microsoft	windows_10_1809	< 10.0.17763.7678
microsoft	windows_10_1809	< 10.0.17763.7678
microsoft	windows_10_21h2	< 10.0.19044.6216
microsoft	windows_10_22h2	< 10.0.19045.6216
microsoft	windows_11_22h2	< 10.0.22621.5768
microsoft	windows_11_23h2	< 10.0.22631.5768
microsoft	windows_11_24h2	< 10.0.26100.4851
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	< 10.0.14393.8330
microsoft	windows_server_2019	< 10.0.17763.7678
microsoft	windows_server_2022	< 10.0.20348.3989
microsoft	windows_server_2022_23h2	< 10.0.25398.1791
microsoft	windows_server_2025	< 10.0.26100.4851

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-50154