CVSS 3.1
5.1 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2025-0287
Medium (5.1) in paragon-software. EPSS 0.4% chance of exploitation in the next 30 days.
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- paragon-software:paragon_backup_\&_recovery
- paragon-software:paragon_disk_wiper
- paragon-software:paragon_drive_copy
- paragon-software:paragon_hard_disk_manager
- paragon-software:paragon_migrate_os_to_ssd
- paragon-software:paragon_partition_manager