CVSS 3.1
8.4 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2025-0286
High (8.4) in paragon-software. EPSS 0.4% chance of exploitation in the next 30 days.
Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- paragon-software:paragon_backup_\&_recovery
- paragon-software:paragon_disk_wiper
- paragon-software:paragon_drive_copy
- paragon-software:paragon_hard_disk_manager
- paragon-software:paragon_migrate_os_to_ssd
- paragon-software:paragon_partition_manager