CVE-2025-0289 — CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it …
Published: 2025-03-03 · CVSS: 7.8 · CVSS 3.1
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7