CVE-2025-53139 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.7 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
microsoft	CNA	7.7 HIGH				CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 11%

Affected Products (NVD)

Vendor	Product	Version
microsoft	windows_10_21h2	𝑥 < 10.0.19044.6456
microsoft	windows_10_22h2	𝑥 < 10.0.19045.6456
microsoft	windows_11_22h2	𝑥 < 10.0.22621.6060
microsoft	windows_11_23h2	𝑥 ≤ 10.0.22631.6060
microsoft	windows_11_24h2	𝑥 < 10.0.26100.6899
microsoft	windows_11_25h2	𝑥 < 10.0.26200.6899
microsoft	windows_server_2025	𝑥 ≤ 10.0.26100.6899

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

21H2 (arm64, x64, x86)	KB5066791
22H2 (arm64, x64, x86)	KB5066791

Windows 11

22H2 (arm64, x64)	KB5066793
23H2 (arm64, x64)	KB5066793
24H2 (arm64, x64)	KB5066835
25H2 (arm64, x64)	KB5066835

Windows Server 2025

Server Core	KB5066835
Standard	KB5066835

Common Weakness Enumeration

CWE-319 - Cleartext Transmission of Sensitive Information
The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53139