CVE-2025-59260

Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Severity Score

5.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.

*Credits: N/A

CVSS Scores

Microsoftv3.1 5.5

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2025-09-11 CVE Reserved
2025-10-14 CVE Published
2025-10-15 EPSS Updated
2025-10-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59260	2025-10-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Microsoft Search vendor "Microsoft"		Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019"				>= 10.0.17763.0 < 10.0.17763.7919 Search vendor "Microsoft" for product "Windows Server 2019" and version " >= 10.0.17763.0 < 10.0.17763.7919"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2019 (Server Core Installation) Search vendor "Microsoft" for product "Windows Server 2019 (Server Core Installation)"				>= 10.0.17763.0 < 10.0.17763.7919 Search vendor "Microsoft" for product "Windows Server 2019 (Server Core Installation)" and version " >= 10.0.17763.0 < 10.0.17763.7919"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2022 Search vendor "Microsoft" for product "Windows Server 2022"				>= 10.0.20348.0 < 10.0.20348.4294 Search vendor "Microsoft" for product "Windows Server 2022" and version " >= 10.0.20348.0 < 10.0.20348.4294"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2025 (Server Core Installation) Search vendor "Microsoft" for product "Windows Server 2025 (Server Core Installation)"				>= 10.0.26100.0 < 10.0.26100.6899 Search vendor "Microsoft" for product "Windows Server 2025 (Server Core Installation)" and version " >= 10.0.26100.0 < 10.0.26100.6899"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2022, 23H2 Edition (Server Core Installation) Search vendor "Microsoft" for product "Windows Server 2022, 23H2 Edition (Server Core Installation)"				>= 10.0.25398.0 < 10.0.25398.1913 Search vendor "Microsoft" for product "Windows Server 2022, 23H2 Edition (Server Core Installation)" and version " >= 10.0.25398.0 < 10.0.25398.1913"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2025 Search vendor "Microsoft" for product "Windows Server 2025"				>= 10.0.26100.0 < 10.0.26100.6899 Search vendor "Microsoft" for product "Windows Server 2025" and version " >= 10.0.26100.0 < 10.0.26100.6899"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"				>= 10.0.14393.0 < 10.0.14393.8519 Search vendor "Microsoft" for product "Windows Server 2016" and version " >= 10.0.14393.0 < 10.0.14393.8519"		en		Affected
Microsoft Search vendor "Microsoft"		Windows Server 2016 (Server Core Installation) Search vendor "Microsoft" for product "Windows Server 2016 (Server Core Installation)"				>= 10.0.14393.0 < 10.0.14393.8519 Search vendor "Microsoft" for product "Windows Server 2016 (Server Core Installation)" and version " >= 10.0.14393.0 < 10.0.14393.8519"		en		Affected