CVE-2025-59516

High

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-73·Published 2025-12-09

CVSS

7.8

EPSS

0.02

KEV

Exploits

cve.orgen

135 chars

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

NVDen

135 chars

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9