CVE-2025-29957 MEDIUM

CVE-2025-29957: Windows Deployment Services Denial of Service Vulnerability

Vendor Microsoft
Product Windows 10 Version 1507
Weakness CWE-400
Published May 13, 2025
Last update February 13, 2026
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.

Key dates

02Disclosure timeline

May 13, 2025 CVE published
February 13, 2026 Record updated