CVE-2025-12052 — egwindrv.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
Published: 2026-01-14 · CVSS: 7.8 · CVSS 3.1
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7