Windows CVE-2025-48802

|

EUVD-2025-20601 MEDIUM

Improper Certificate Validation (CWE-295)

2025-07-08 secure@microsoft.com

Windows Information Disclosure Microsoft Windows 11 22h2 Windows 11 23h2 Windows Server 2022 Windows Server 2022 23h2

6.5

CVSS 3.1

Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

4

Patch available

Apr 16, 2026 - 05:29 EUVD

10.0.22621.5624,10.0.20348.3932,10.0.22631.5624

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20601

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 17:15 nvd

MEDIUM 6.5

DescriptionNVD

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

Analysis

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

Technical ContextAI

This vulnerability is classified as Improper Certificate Validation (CWE-295).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More from same product – last 7 days

CVE-2026-10044 HIGH This Week POC

{filename} endpoint. The flawed traversal guard only rejects forward slashes and '..' sequences, so absolute Windows pat

CVE-2026-40412 CRITICAL Monitor

Remote code execution in Microsoft Azure Orbital Spatio allows unauthenticated network attackers to upload dangerous fil

CVE-2026-41104 CRITICAL Monitor

Unsafe deserialization in Microsoft Planetary Computer Pro (Geocatalog) lets a remote unauthenticated attacker craft mal

CVE-2026-23652 CRITICAL Monitor

Remote code execution in Microsoft Power Pages allows unauthenticated network attackers to inject and execute operating-

CVE-2026-47280 CRITICAL Monitor

Privilege elevation in Microsoft Azure Resource Manager (ARM) allows remote unauthenticated attackers to bypass authenti

Share

CVE-2025-48802 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy