CVE-2025-27485HighCVSS 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
🎯 Affected products10
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5055519 (Security Update) — fixed build 10.0.17763.7136 KB5055526 (Security Update) — fixed build 10.0.20348.3453 KB5055523 (Security Update) — fixed build 10.0.26100.3775 KB5055521 (Security Update) — fixed build 10.0.14393.7969 KB5055557 (Monthly Rollup) — fixed build 6.3.9600.22523
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27485
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5055519
- referencehttps://support.microsoft.com/help/5055519
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5055526
- referencehttps://support.microsoft.com/help/5055526
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5055523
- referencehttps://support.microsoft.com/help/5055523
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5055521
- referencehttps://support.microsoft.com/help/5055521
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5055557
- referencehttps://support.microsoft.com/help/5055557