Critical CVSS 9.8 EPSS 0.02241 2025-09 archive

Executive Summary

None

Overview

9.8
CVSS CRITICAL
Critical
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Elevation of Privilege
Released Sep 9 2025
Last Updated Sep 9 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.02241 — 0.81013 percentile
NVD CVSS 9.8 CRITICAL — differs from MSRC

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 8.7

EPSS Score

0.02241
probability of exploitation in the next 30 days
0.81013 percentile - updated 2026-07-25
View on FIRST.org

Known Exploits

Acknowledgments

Ziv Somech with Microsoft
Shimi Gersner with Microsoft
Shahar Zelig
Stav Nir with Microsoft