CVE-2025-29809

High

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

secure@microsoft.com·CWE-922·Published 2025-04-08

CVSS

7.1

EPSS

0.04

KEV

Exploits

cve.orgen

129 chars

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

NVDen

129 chars

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

NVDes

152 chars

El almacenamiento inseguro de información confidencial en Windows Kerberos permite que un atacante autorizado eluda una función de seguridad localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.1	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RC:C
3.1	Secondary	NVD	7.1	1.8	5.2