PT-2025-42102 · Microsoft · Windows Resilient File System+1

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-59210

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Resilient File System (ReFS) (affected versions not specified)

Description An elevation of privilege issue exists within the Windows Resilient File System (ReFS) Deduplication Service. Successful exploitation of this issue could allow an attacker to gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-13020

CVE-2025-59210

Affected Products

Windows

Windows Resilient File System

References · 7

• https://bdu.fstec.ru/vul/2025-13020 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59210 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59210 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59210 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-59210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59210 · Security Note
• https://twitter.com/CVEnew/status/1978171173679825388 · Twitter Post