CVE-2025-54107

Medium

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

secure@microsoft.com·CWE-41·Published 2025-09-09

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

140 chars

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

NVDen

140 chars

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
3.1	Secondary	NVD	4.3	2.8	1.4