Skip to content
OpenAdvisories
Low VA-25-273-01 2 CVEs

Microsoft Windows inconsistent driver blocking

Published Sep 30, 2025 · Updated Sep 30, 2025

Vendor: Microsoft Product: Windows Product: Windows 10 Product: Windows 11 Product: Windows Server

Summary

Microsoft Windows Defender Application Control (WDAC) and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which drivers are being blocked.

Vulnerabilities 2

  • High 7.4
    CVE-2022-50238

    The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended d…

    Microsoft Windows Windows
  • High 7.4
    CVE-2025-59033

    The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entrie…

    Microsoft Windows Windows

Revision history

  1. #1.0.0

    Initial publication