CVE-2025-4044: XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Published Aug 19, 2025
·Updated
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Affected Software
2 affected components
Lexmark Universal Driver
Lexmark printer drivers for Windows
Event History
Aug 19, 2025
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4044?
CVE-2025-4044 is rated as a high severity vulnerability due to its potential for sensitive information disclosure.
2
How does CVE-2025-4044 occur?
CVE-2025-4044 occurs due to improper restriction of XML External Entity references in Lexmark printer drivers.
3
What systems are affected by CVE-2025-4044?
CVE-2025-4044 affects various Lexmark printer drivers for Windows, including the Lexmark Universal Driver.
4
How can I mitigate CVE-2025-4044?
Mitigation for CVE-2025-4044 involves updating to the latest version of the affected Lexmark printer drivers.
5
What type of data can be exposed through CVE-2025-4044?
CVE-2025-4044 can be exploited to disclose sensitive information to an arbitrary URL.