CVE-2025-48464

Summary

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information.

Affected Software

Weaknesses

• CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-097/
• https://tuxplorer.com/posts/dont-leave-me-outdated/

• ←Previous
• Next→