Back to board Open MSRC
MSRC compact vulnerability detail

CVE-2025-59190 · Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.

Severity
Important
Impact
Denial of Service
CVSS
5.5 base · 4.8 temporal
Release
2025-10-14
Signals
Microsoft Windows Search Component Denial of Service Exploited: No Publicly disclosed: No Exploitability: Exploitation Unlikely
CWE
CWE-20: Improper Input Validation
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Old version New version
Description
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
FAQ / Articles
FAQ
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? The user would have to access a malicious folder or directory. Users should never open anything that they do not know or trust to be safe.
Microsoft Windows Search Component Denial of Service Vulnerability
Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.