CVE-2025-49716

—

CVSS 3.1

7.5 high

EPSS

1%p71

Published

Jul 8, 2025 (Jul 8, 2025)

Modified

Jun 17, 2026

Description

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news2 stories

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

The Hacker NewsAug 17, 08:43 UTC · Aug 17, 2025Malware CVE-2025-26673 CVE-2025-32724 CVE-2025-49716+2 CVEs1

35

Win-DDoS: Attackers can turn public domain controllers into DDoS agents

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2025Vulnerability CVE-2025-32724 CVE-2024-49113 CVE-2025-26673+2 CVEs

35