CVE-2025-59260

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Oct 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-592617.0Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locall CVE-2025-592685.3On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attack CVE-2025-592696.1A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker CVE-2025-59277.5The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete CVE-2025-592703.1psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process CVE-2025-592718.7Redis Enterprise Elevation of Privilege Vulnerability CVE-2025-592729.3Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform in CVE-2025-592739.8Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.CVE-2025-592757.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally CVE-2025-592777.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally CVE-2025-592787.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally CVE-2025-59284.3The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,