Medium · 5.5 CVE-2025-62209 EUVD-2025-93401GHSA-rxmx-452f-crq3

Windows License Manager Information Disclosure Vulnerability

Published Nov 11, 2025 · Updated Feb 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1507 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows 11 Version 25H2 Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1507	10.0.10240.0 – < 10.0.10240.21161	10.0.10240.21161
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.8519	10.0.14393.8519
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.7919	10.0.17763.7919
Microsoft	Windows 10 Version 21H2	10.0.19044.0 – < 10.0.19044.6456	10.0.19044.6456
Microsoft	Windows 10 Version 22H2	10.0.19045.0 – < 10.0.19045.6456	10.0.19045.6456
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.6060	10.0.22621.6060
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.6060	10.0.22631.6060
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.6060	10.0.22631.6060
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.6899	10.0.26100.6899
Microsoft	Windows 11 Version 25H2	10.0.26200.0 – < 10.0.26200.6899	10.0.26200.6899
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.8519	10.0.14393.8519
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.8519	10.0.14393.8519
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.7919	10.0.17763.7919
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.7919	10.0.17763.7919
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.4294	10.0.20348.4294
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1913	10.0.25398.1913
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.6899	10.0.26100.6899
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.6899	10.0.26100.6899

Advisories 3

WID-SEC-2025-2564 Microsoft Windows und Windows Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 13, 2026
MSRC-CVE-2025-62209 Windows License Manager Information Disclosure Vulnerability Microsoft Security Response Center · Nov 18, 2025
NCSC-2025-0358 Kwetsbaartheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Nov 11, 2025

References

Windows License Manager Information Disclosure Vulnerability vendor-advisory patch