Home Microsoft CVE-2025-53947
Back to Microsoft

CVE-2025-53947

Windows - Data Folder

Microsoft CVSS 7.7 Updated March 13, 2026

Executive Risk Summary

"A local attacker with low privileges on the Windows system can exploit this vulnerability to corrupt sensitive data by modifying the content of a data folder created with weak privileges. This vulnerability poses a significant risk to data integrity, as any user logged into the Windows system can modify the folder's content."

Operational Audit Arsenal

Target Type Folder
Target Asset Data Folder
Standard Path %userprofile%\AppData\Local\Data
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Data Folder (Folder)
$Targets = 'Data Folder'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

File System Access

Internal Work Notes

CVE-2025-53947: Local attacker can corrupt sensitive data by exploiting weak folder privileges, requiring immediate attention to prevent data tampering.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.