CVE-2025-58720

CVE-2025-58720 is a high-severity information disclosure vulnerability affecting Microsoft Windows Cryptographic Services, stemming from a risky cryptographic primitive implementation. An authorized local attacker can exploit this with low complexity to achieve high confidentiality, integrity, and availability impacts. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion and media coverage, indicating notable attention despite its low EPSS score.