Vulnerabilitymedium
Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-49760 | External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network | 3.5 | 1% |
From the original article
4 min read at thehackernews.com
Ravie Lakshmanan Aug 10, 2025 Vulnerability / Endpoint Security Cybersecurity researchers have presented new findings related to a now-patched security issue in Microsoft's Windows Remote Procedure Call (RPC) communication protocol that could be abused by an attacker to conduct spoofing attacks and impersonate a known server. The vulnerability, tracked as CVE-2025-49760 (CVSS score: 3.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.