CVE-2025-48823
MEDIUMDescription
Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network.
Is your site exposed to CVE-2025-48823?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| microsoft | windows_10_1507 |
| microsoft | windows_10_1507 |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1809 |
| microsoft | windows_10_1809 |
| microsoft | windows_10_21h2 |
| microsoft | windows_10_22h2 |
| microsoft | windows_11_22h2 |
| microsoft | windows_11_23h2 |
| microsoft | windows_11_24h2 |
| microsoft | windows_server_2016 |
| microsoft | windows_server_2019 |
| microsoft | windows_server_2022 |
| microsoft | windows_server_2022_23h2 |
| microsoft | windows_server_2025 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-48823? +
How severe is CVE-2025-48823? +
What products are affected by CVE-2025-48823? +
How do I check if I'm vulnerable to CVE-2025-48823? +
Related Vulnerabilities
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Windows Cryptographic Services Security Feature Bypass Vulnerability
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Cryptographic issue while performing RSA PKCS padding decoding.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code …