Skip to content
OpenAdvisories
High MSRC-CVE-2025-27738 1 CVE

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Published Apr 8, 2025 · Updated Apr 9, 2025 · Revision 2

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.

Are the updates for Windows 10 for x64-based Systems and Windows 10 for 32-bit Systems currently available?
Yes. As of April 9, 2025, the security update (5055547) for Windows 10 for x64-based Systems and Windows 10 for 32-bit Systems are available. Customers running Windows 10 should ensure the update is installed to be protected from this vulnerability.

Security updates
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.22631.5189 — https://support.microsoft.com/help/5055528
10.0.25398.1551 — https://support.microsoft.com/help/5055527
10.0.26100.3775 — https://support.microsoft.com/help/5055523
10.0.10240.20978 — https://support.microsoft.com/help/5055547
10.0.14393.7969 — https://support.microsoft.com/help/5055521
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.17763.7136 — https://support.microsoft.com/help/5055519
6.3.9600.22523 — https://support.microsoft.com/help/5055557
6.2.9200.25423 — https://support.microsoft.com/help/5055581

Vulnerabilities 1

Revision history

  1. #2

    The security updates for Windows 10 for 32-bit Systems and Windows 10 for x64-based Systems are now available. See the Security Updates table for more information.

  2. #1

    Information published.

References