CVE-2025-48464

Published: Oct 8, 2025Modified: Jun 17, 2026Deferred

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://tuxplorer.com/posts/dont-leave-me-outdated/

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-097/

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Timeline

No history available yet.