PT-2025-25458 · Undefined · Undefined

Published 2025-06-14 · Updated 2025-11-12 · CVE-2025-20065

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Display Virtualization for Windows OS versions prior to 1797

Description An uncontrolled search path issue exists in some Display Virtualization for Windows OS software. This may allow an unprivileged software adversary with an authenticated user and a high complexity attack to escalate privileges. The issue potentially occurs via local access and requires active user interaction. The potential impacts to the system include confidentiality, integrity, and availability. The vulnerability has been actively exploited.

Recommendations Update to version 1797 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-20065

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-20065 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01303.html · Note
• https://twitter.com/transilienceai/status/1933760689778331797 · Twitter Post
• https://twitter.com/CVEnew/status/1988452634882416994 · Twitter Post