PT-2025-28521

CVE-2025-47987

Published

2025-07-08

Updated

2026-01-06

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified)

Description: The issue concerns a heap-based buffer overflow in the Windows Cred SSProvider Protocol. This allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Erik Egsgard

Hexnomad

Vendors

Affected products

Weakness enumeration

CWE-122: Heap-based Buffer Overflow

CWE-190: Integer Overflow or Wraparound