CVE-2025-55336

CVE Database · CVE-2025-55336

CVE-2025-55336

· MEDIUMAnalyzed

CVSS v3.1

5.5

EPSS

0.55%

Published

Oct 14, 2025

Modified

Oct 27, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

Affected Products (11)

microsoft · windows_10_1809 (up to 10.0.17763.7919)vulnerable

microsoft · windows_10_21h2 (up to 10.0.19044.6456)vulnerable

microsoft · windows_10_22h2 (up to 10.0.19045.6456)vulnerable

microsoft · windows_11_22h2 (up to 10.0.22621.6060)vulnerable

microsoft · windows_11_23h2 (up to 10.0.22631.6060)vulnerable

microsoft · windows_11_24h2 (up to 10.0.26100.6899)vulnerable

microsoft · windows_11_25h2 (up to 10.0.26200.6899)vulnerable

microsoft · windows_server_2019 (up to 10.0.17763.7919)vulnerable

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55336

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs