CVE-2025-47979

Summary

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0 < 10.0.25398.1913affected
MicrosoftWindows Server 202510.0.26100.0 < 10.0.26100.6899affected
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0 < 10.0.26100.6899affected

Weaknesses

  • CWE-532: CWE-532: Insertion of Sensitive Information into Log File

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References