CVE-2025-59184: Storage Spaces Direct Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally.
Other sources
Storage Spaces Direct Information Disclosure Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59184?
CVE-2025-59184 is rated as a medium severity vulnerability due to the risk of unauthorized information disclosure.
How do I fix CVE-2025-59184?
The fix for CVE-2025-59184 involves applying the latest security patches available for your affected Windows Server version.
What products are affected by CVE-2025-59184?
CVE-2025-59184 affects multiple versions of Windows Server, including 2016, 2019, 2022, and 2025.
Can CVE-2025-59184 be exploited remotely?
CVE-2025-59184 requires local access, making remote exploitation highly unlikely but still poses a risk if an attacker gains physical access.
What type of vulnerability is CVE-2025-59184?
CVE-2025-59184 is classified as an information disclosure vulnerability within the Windows High Availability Services.