CVE Catalog
CVE-2025-59516
HighCVSS 7.8Exploitation Probability (EPSS)
High risk2.34%
83th percentile - higher than 83% of all known CVEs
Summary
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker can exploit the missing authentication to perform critical operations, potentially leading to privilege escalation and system takeover.
Recommendation
Apply vendor security patches immediately and restrict access to the driver to trusted processes only.
Other vulnerabilities in Windows Storage VSP Driver
Original NVD description (English source)
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS