← back
CVE-2025-29971highCWE-125

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 61%
exploitation probability
61%top 1% of all CVEs
observed exploitation
nono source reports it
In short

A flaw in Web Threat Defense allows an attacker to crash or freeze a system by sending specially crafted network traffic, disrupting service availability.

Technical detail

An out-of-bounds read vulnerability in WTD.sys kernel driver permits remote unauthenticated attackers to trigger a denial of service condition via malformed network packets, without requiring local access or privilege escalation.

Summary generated and translated by AI from the official description.
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C