VDB
CVE-2025-54957
CVE-2025-54957
PUBLISHED
CVSS 8.699999809265137 HIGH
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
EPSS 1.59% · 74.7th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.59%
74.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Windows Server 2025 | |
| Microsoft | Microsoft Windows 10 | |
| Google Android <2026-01-05 | ||
| Microsoft | Microsoft Windows 11 Version 25H2 | |
| Microsoft | Microsoft Windows Server 2022 | |
| Samsung | Samsung Android 15 <SMR-NOV-2025 | |
| Google Android Pixel <2025-12-05 | ||
| Microsoft | Microsoft Windows 10 Version 1809 | |
| Microsoft | Microsoft Windows 10 Version 22H2 | |
| Samsung | Samsung Android 16 <SMR-NOV-2025 | |
| Microsoft | Microsoft Windows 11 Version 23H2 | |
| Microsoft | Microsoft Windows Server 2012 R2 | |
| Microsoft | Microsoft Windows 10 Version 1607 | |
| Microsoft | Microsoft Windows 10 Version 21H2 | |
| Microsoft | Microsoft Windows Server 2012 | |
| Microsoft | Microsoft Windows Server 2022 23H2 Edition | |
| Microsoft | Microsoft Windows App Client for Desktop | |
| Microsoft | Microsoft Windows Server 2019 | |
| Microsoft | Microsoft Windows Server 2008 SP2 | |
| Microsoft | Microsoft Windows Remote Desktop client for Desktop |
…and 6 more
Timeline
- Oct 14, 2025 CVE Published
- Oct 20, 2025 Coalition ESS Score
- Oct 21, 2025 EPSS Score
- Oct 24, 2025 CVE Updated
- Oct 27, 2025 EPSS Score
- Nov 3, 2025 EPSS Score
- Nov 9, 2025 EPSS Score
- Nov 15, 2025 EPSS Score
- Nov 18, 2025 Coalition ESS Score
- Nov 22, 2025 EPSS Score
- Nov 28, 2025 EPSS Score
- Dec 4, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0013.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0013 advisory
- https://source.android.com/docs/security/bulletin/2026/2026-01-01 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-54957 advisory
- https://professional.dolby.com/siteassets/pdfs/dolby-security-advisory-CVE-2025-54957-Oct-14-25.pdf advisory
- https://source.android.com/docs/security/bulletin/pixel/2025-12-01 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2472.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2472 advisory
- https://security.samsungmobile.com/securityUpdate.smsb advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2307.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2307 advisory
- https://msrc.microsoft.com/update-guide/ advisory
- https://hawktrace.com/blog/CVE-2025-59287-UNAUTH advisory
- https://securityaffairs.com/183830/security/cve-2025-59287-microsoft-fixes-critical-wsus-flaw-under-active-attack.html advisory
- https://ssd-disclosure.com/cloud-filter-arbitrary-file-creation-eop-patch-bypass-lpe/ advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2726.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2726 advisory
- https://projectzero.google/2026/01/pixel-0-click-part-1.html advisory