Product:
Windows File Explorer
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to significant confidentiality risks as sensitive data may be accessed by malicious actors. Users are required to interact with the system for the exploitation to occur.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-58739 |
Exploitation
To exploit this vulnerability, an attacker must first gain access to the network where the affected system is located. Once on the network, the attacker can use social engineering techniques to trick users into interacting with malicious content, which can then lead to the unauthorized exposure of sensitive information.
Affected Products
- Windows File Explorer: The primary product affected, allowing unauthorized access to sensitive information.
Mitigation
To mitigate this vulnerability, users should ensure that they do not interact with unknown or suspicious content while using Windows File Explorer. Regular updates and patches from Microsoft should be applied to protect against known vulnerabilities. Additionally, implementing network security measures can help prevent unauthorized access.