CVE-2025-48809 is a medium-severity information disclosure vulnerability affecting Microsoft Windows 11 24H2 and Windows Server 2025. It stems from processor optimization removing or modifying security-critical code within the Windows Kernel, allowing an authorized local attacker to access sensitive information. The vulnerability has a CVSS score of 5.5, indicating low attack complexity and privileges required, but high confidentiality impact. There is currently no public exploit code available, it is not listed in the KEV catalog, and community discussion and media coverage are minimal, suggesting low active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.0.26100.4652CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* | ||
< 10.0.26100.4652CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.