Skip to content
OpenAdvisories
High MSRC-CVE-2025-21312 1 CVE

Windows Smart Card Reader Information Disclosure Vulnerability

Published Jan 14, 2025 · Updated Jan 14, 2025

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L),but lead to no loss of availability (A:N) and integrity (I:N)? What does that mean for this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).

Security updates
10.0.17763.6775 — https://support.microsoft.com/help/5050008
10.0.20348.3091 — https://support.microsoft.com/help/5049983
10.0.19044.5371 — https://support.microsoft.com/help/5049981
10.0.22621.4751 — https://support.microsoft.com/help/5050021
10.0.25398.1369 — https://support.microsoft.com/help/5049984
10.0.10240.20890 — https://support.microsoft.com/help/5050013
10.0.14393.7699 — https://support.microsoft.com/help/5049993
6.2.9200.25273 — https://support.microsoft.com/help/5050004
6.3.9600.22371 — https://support.microsoft.com/help/5050048

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References