CVE-2025-42888

published 2025-11-11

CVE-2025-42888: SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during…

medium 5.5 CVSS 3.1

AV L AC L PR H UI R S C C H I N A N

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_gui_for_windows	—	—
sap_se	sap_gui_for_windows	—	—

CWE-316