NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2025-55232

CVSS 3.1: 9.8 critical
EPSS: 2%p80
Published: Sep 9, 2025 · Sep 9, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-55232 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

Vendors: microsoft

Products: hpc pack

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

4 stories

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs

The Hacker NewsSep 11, 08:56 UTC · Sep 11, 2025VulnerabilityExploitedCVE-2025-53791 CVE-2025-55234 CVE-2025-54914+93

60

Microsoft Patch Tuesday security updates for September 2025 fixed two zero

Security AffairsSep 10, 07:50 UTC · Sep 10, 2025VulnerabilityExploitedCVE-2025-55234 CVE-2024-21907 CVE-2025-552323 · 1 read

60

Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2025VulnerabilityExploitedCVE-2025-54918 CVE-2025-54916 CVE-2025-55232+81 · 1 read

60

Microsoft Patch Tuesday addresses 81 vulnerabilities, none actively exploited

CyberScoopSep 9, 21:21 UTC · Sep 9, 2025VulnerabilityExploitedCVE-2025-55232 CVE-2025-54918 CVE-2025-552343 · 1 read

60