CVE-2025-47956

CVE-2025-47956 affects Windows Security App. Root cause: external control of a file name or path enables spoofing of the security UI by an authorized local attacker. Impact is Spoof UI with high confidentiality impact but no integrity/availability changes per CVSS data (LOCAL, PR:L, UI:N, C:H/I:N...

CVE-2025-53769

CVE-2025-53769 : Windows Security App contains a flaw enabling spoofing via external control of a file name or path, allowing an authorized local attacker to spoof UI. Affected: Windows Security App. Root cause: file/path parameter control leading to spoofing. Impact: local spoofing of user inter...