CVE-2025-55676

Published: Oct 14, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.

Affected (3)

Products: Microsoft: Windows 11 24h2, Windows 11 25h2, Windows Server 2025

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 11 24h2	Before 10.0.26100.6899
Microsoft Windows 11 25h2	Before 10.0.26200.6899
Microsoft Windows Server 2025	Before 10.0.26100.6899

Related CWEs

CWE-209

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55676

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.