CVE-2025-49689

High

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-125·Published 2025-07-08

CVSS

7.8

EPSS

0.01

KEV

Exploits

cve.orgen

121 chars

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

NVDen

121 chars

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

NVDes

139 chars

El desbordamiento de enteros o el envoltura en Virtual Hard Disk (VHDX) permite que un atacante no autorizado eleve privilegios localmente.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9