CVE-2025-27464criticalCWE-276

CVE-2025-27464: falha crítica em Xen Windows PV drivers

WinPVDrivers: Excessive permissions on user-exposed devices

Publicada em

Seguir esta CVE+ Monitorar Windows PV drivers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.2%
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Xen · Windows PV drivers
CVEs relacionadas — Xen Windows PV drivers

No mesmo produto, das mais perigosas para as menos.

CVE-2025-27463CRITICALWinPVDrivers: Excessive permissions on user-exposed devicesEPSS 0.2%CVE-2025-27462CRITICALWinPVDrivers: Excessive permissions on user-exposed devicesEPSS 0.2%