CVE-2025-0287

CVE-2025-0287 is a null pointer dereference vulnerability in the biontdrv.sys driver affecting multiple Paragon Software products, including Backup & Recovery and Hard Disk Manager. This flaw allows an unauthenticated local attacker to execute arbitrary kernel-level code, leading to privilege escalation. While the CVSS score is Medium (5.1), indicating low attack complexity and no user interaction, recent media coverage and community discussion confirm active exploitation in the wild, particularly in ransomware campaigns leveraging Bring Your Own Vulnerable Driver (BYOVD) attacks. No public exploit code is currently available, but its active exploitation by threat actors highlights its critical risk despite the moderate CVSS score.