CVE-2025-49683

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.90% chance of exploitation in the next 30 days, 78th percentile

Published

2025-07-08

Updated

2026-02-13

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52394

References

• CVE Record
• NVD entry

Related

• CVE-2025-49677
• CVE-2025-49704
• CVE-2025-49619
• CVE-2025-49706
• CVE-2025-49596
• CVE-2025-4971