CVE-2025-47969HighCVSS 4.4
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose information locally.
🎯 Affected products8
- Windows 11 Version 22H2 for ARM64-based Systems
- Windows 11 Version 22H2 for x64-based Systems
- Windows 11 Version 23H2 for ARM64-based Systems
- Windows 11 Version 23H2 for x64-based Systems
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5058405 (Security Update) — fixed build 10.0.22621.5335 KB5058411 (Security Update) — fixed build 10.0.26100.4061 KB5058497 (SecurityHotpatchUpdate) — fixed build 10.0.26100.3981
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47969
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5058405
- referencehttps://support.microsoft.com/help/5058405
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5058411
- referencehttps://support.microsoft.com/help/5058411
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5058497
- referencehttps://support.microsoft.com/help/5058497