CVE-2025-0289

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-02904.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from CVE-2025-02918.8Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra CVE-2025-02924.9SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacke CVE-2025-02932.7CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticat CVE-2025-02948.8A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vuln CVE-2025-02955.4A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functi CVE-2025-02969.8A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the fil CVE-2025-02976.3A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code o CVE-2025-02989.8A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing o CVE-2025-02999.8A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /se CVE-2025-03008.8A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functio CVE-2025-03016.1A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some u