CVE-2025-55232

—

CVSS 3.1

9.8 critical

EPSS

2%p80

Published

Sep 9, 2025 (Sep 9, 2025)

Modified

Jun 17, 2026

Description

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: hpc pack
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news4 stories

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs

The Hacker NewsSep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791 CVE-2025-55234 CVE-2025-54914+9 CVEs

60

Microsoft Patch Tuesday security updates for September 2025 fixed two zero

Security AffairsSep 10, 07:50 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-55234 CVE-2024-21907 CVE-2025-55232

60

Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-54918 CVE-2025-54916 CVE-2025-55232+8 CVEs

60

Microsoft Patch Tuesday addresses 81 vulnerabilities, none actively exploited

CyberScoopSep 9, 21:21 UTC · Sep 9, 2025Vulnerability in the wildCVE-2025-55232 CVE-2025-54918 CVE-2025-55234

60