CVE-2025-29808: Microsoft Windows Server 2022

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Affected products

• Microsoft Windows Server 2022: before 10.0.20348.3453 (fixed in 10.0.20348.3453)

Published 2025-04-08. Last modified 2026-06-17.