CNNVD-202508-1218 Information

CNNVD ID

CNNVD-202508-1218

CVE-2025-53156

  • CNNVD Published: 2025-08-12

Description (Chinese)

Microsoft Windows Storage Port Driver是美国微软(Microsoft)公司的一种系统提供的存储端口驱动程序,特别适用于高性能总线,例如通过光纤通道(FC)或 FC 总线和 RAID 适配器使用 NVMe。 Microsoft Windows Storage Port Driver存在信息泄露漏洞。攻击者利用该漏洞可以获取敏感信息。以下产品和版本受到影响:Windows Server 2025 (Server Core installation),Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025。

Description (English)

Microsoft Windows Port Driver is a storage port driver provided by a system of Microsoft (MSC) in the United States, especially for high-performance buses, such as the use of NVME through fibre-optic channels (FC) or FC bus and RAID adapters. There’s a leak in Microsoft Windows Storage Port River. The attackers use that loophole to obtain sensitive information. The following products and versions have been affected: Windows Server 2025 (Server Core integration), Windows Server 2022, 23H2 Evaluation (Server Corporation), Windows 11 Version 24H2 for ARM 64-based Systems, Windows 11 Version 24H2 for x 64-based Systems, Windows Server 2025.

Hazard Level

High

Vulnerability Type

信息泄露

Affected Vendor

微软

Published

2025-08-12

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53156 https://nvd.nist.gov/vuln/detail/CVE-2025-53156

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53156

Share on: