What is CVE-2025-55683?

CVE-2025-55683 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows Kernel Information Disclosure Vulnerability

Which CVE IDs does CVE-2025-55683 cover?

CVE-2025-55683 covers the following CVE IDs: CVE-2025-55683. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2025-55683?

CVE-2025-55683 has a CVSS v3 base score of 5.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2025-55683?

CVE-2025-55683 affects 9 products, including: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; and others — see the full list on the advisory page.

CVE-2025-55683HighCVSS 5.5

Windows Kernel Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 14, 2025

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-55683 →

📋 Description

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

🎯 Affected products9

Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2025 (Server Core installation)

✅ Remediation

KB5066586 (Security Update) — fixed build 10.0.17763.7919 KB5066782 (Security Update) — fixed build 10.0.20348.4294 KB5066835 (Security Update) — fixed build 10.0.26100.6899 KB5066780 (Security Update) — fixed build 10.0.25398.1913 KB5066836 (Security Update) — fixed build 10.0.14393.8519

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products9

✅ Remediation

🔗 References (11)