CVE-2025-59214 | BDVDB-2026-298049 Detail
MicrosoftWindows 10 Version 1507
Description#
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59214
- https://github.com/rubenformation/CVE-2025-50154/
- https://cymulate.com/blog/ntlm-leak-cve-2025-59214/
- https://www.vicarius.io/vsociety/posts/cve-2025-59214-detection-script-windows-file-explorer-spoofing-vulnerability
- https://www.vicarius.io/vsociety/posts/cve-2025-59214-mitigation-script-windows-file-explorer-spoofing-vulnerability
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.