VDB

CISA-2025-47979

CISA-2025-47979 PUBLISHED CVSS 5.5 MEDIUM

Reported by microsoft · Published October 14, 2025

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0
MicrosoftWindows Server 202510.0.26100.0
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0
microsoftwindows_server_202510.0.26100.0, 10.0.26100.0, 10.0.26100.0
microsoftwindows_server_23h210.0.25398.0, 10.0.25398.0
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0, 10.0.25398.0
MicrosoftWindows Server 202510.0.26100.0, 10.0.26100.0
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0, 10.0.26100.0

Timeline

  • Oct 14, 2025 CVE Published
  • Feb 22, 2026 CVE Updated
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›