CVE-2025-0285: Paragon-Software Paragon Backup & Recovery

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.

Affected products

• Paragon-Software Paragon Backup & Recovery: from 15, up to and including 17.39
• Paragon-Software Paragon Disk Wiper: from 15, up to and including 16
• Paragon-Software Paragon Drive Copy: from 15, up to and including 16
• Paragon-Software Paragon Hard Disk Manager: from 15, up to and including 17.39
• Paragon-Software Paragon Migrate OS To Ssd: from 4, up to and including 5
• Paragon-Software Paragon Partition Manager: from 15, up to and including 17.39

Published 2025-03-03. Last modified 2026-06-17.