cbcvebase.
CVE-2025-59185
published 2025-10-14

CVE-2025-59185: External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

Affected

45 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1507< 10.0.10240.2116110.0.10240.21161
microsoftwindows_10_1607< 10.0.14393.851910.0.14393.8519
microsoftwindows_10_1809< 10.0.17763.791910.0.17763.7919
microsoftwindows_10_21h2< 10.0.19044.645610.0.19044.6456
microsoftwindows_10_22h2< 10.0.19045.645610.0.19045.6456
microsoftwindows_10_version_1507>= 10.0.10240.0 < 10.0.10240.2116110.0.10240.21161
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.851910.0.14393.8519
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.791910.0.17763.7919
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.645610.0.19044.6456
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.645610.0.19045.6456
microsoftwindows_11_22h2< 10.0.22621.606010.0.22621.6060
microsoftwindows_11_23h2<= 10.0.22631.6060
microsoftwindows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoftwindows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoftwindows_11_version_22h2>= 10.0.22621.0 < 10.0.22621.606010.0.22621.6060
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.606010.0.22631.6060
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.606010.0.22631.6060
microsoftwindows_11_version_24h2>= 10.0.26100.0 < 10.0.26100.689910.0.26100.6899
microsoftwindows_11_version_25h2>= 10.0.26200.0 < 10.0.26200.689910.0.26200.6899
microsoftwindows_server_2012
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.228246.3.9600.22824
microsoftwindows_server_2016<= 10.0.14393.8519
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.851910.0.14393.8519
microsoftwindows_server_2019< 10.0.17763.791910.0.17763.7919
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.791910.0.17763.7919