Product:
Windows USB Video Driver
Summary
The Windows USB Video Driver generates an error message that contains sensitive information. This vulnerability allows an authorized attacker to disclose information locally. The issue arises from improper handling of error messages, which can expose confidential data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-55676 |
Exploitation
To exploit this vulnerability, an attacker with local access can trigger the error message in the Windows USB Video Driver. By doing so, they can gain access to sensitive information that should not be disclosed. This requires low privileges, making it easier for an attacker to exploit the vulnerability if they have any level of access to the system.
Affected Products
- Windows USB Video Driver: Vulnerable to information disclosure through error messages.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are up to date and follow best practices for securing local access to prevent unauthorized exploitation.