s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2025-12993

📛 CVE Title

CVE-2025-12993

⬇ Download JSON ⚠ View as Threat

Description

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67968. Reason: This candidate is a reservation duplicate of CVE-2025-67968. Notes: All CVE users should reference CVE-2025-67968 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Overview

State
REJECTED
Assigner (CNA)
Wordfence
CVSS severity
null
CVSS score
CVSS 9.8 / 10 9.8 9.8 / 10
CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Effective score
9.8 / 10 NULL source: CNA overview
CWE(s)
—
Reserved
2025-11-11
Published
—
Last updated
2026-05-01 22:53 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/12xxx/CVE-2025-12993.json
Linked Threat
CVE-2025-12993 — CVE-2025-12993

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published
2026-05-01 21:16:16 UTC
NVD last modified
2026-05-01 21:16:16 UTC

NVD / KEV / EPSS data refreshed 2026-06-30 20:36 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (2)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

Remediations (15)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • Microsoft and Adobe Patch Tuesday, September 2025 Security Update ...
    web:blog.qualys.com

    EVALUATE Vendor-Suggested Mitigation with Policy Audit With Qualys Policy Audit's Out-of-the-Box Mitigation or Compensatory Controls, reduce the risk of a vulnerability being exploited because the remediation ( fix / patch ) cannot be done now; these security controls are not recommended by any industry standards, such as CIS, DISA-STIG.

    2026-05-23 12:15 UTC
  • CVE-2025-21293/README.md at main - GitHub
    web:github.com

    CVE - 2025 -21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsoft patched this in January 2025 . Apply updates to mitigate risks.

    2026-05-23 12:15 UTC
  • Patch Tuesday, October 2025 'End of 10' Edition
    web:krebsonsecurity.com

    October's Patch Tuesday also marks the final month that Microsoft will ship security updates for Windows 10 systems.

    2026-05-23 12:15 UTC
  • Nvd - Cve-2025-2993
    web:nvd.nist.gov

    An official website of the United States government Here's how you know

    2026-05-23 12:15 UTC
  • Security Update Guide - Microsoft
    web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

    2026-05-23 12:15 UTC
  • Microsoft Patch Tuesday - October 2025 - Lansweeper
    web:www.lansweeper.com

    The October 2025 edition of Patch Tuesday brings us 173 new fixes, with 9 rated as critical, 3 of which are actively exploited. We've listed the most important changes below. Windows Agere Modem Driver Elevation of Privilege Vulnerability CVE - 2025 -24990 is an elevation of privilege vulnerability that has been actively exploited.

    2026-05-23 12:15 UTC
  • Patch Tuesday - October 2025 - Rapid7
    web:www.rapid7.com

    Microsoft has published 172 new vulnerabilities, including six zero-day vulnerabilities. Windows 10 moves past the end of support, sort of. Critical RCE in Windows Server Update Service.

    2026-05-23 12:15 UTC
  • Microsoft Patches 86 Vulnerabilities - SecurityWeek
    web:www.securityweek.com

    Microsoft has released patches for dozens of flaws in Windows and other products, including ones with a 'likely exploitation' rating.

    2026-05-23 12:15 UTC
  • CVE-2025-21293: Windows 10 Privilege Escalation Vulnerability
    web:www.sentinelone.com

    CVE - 2025 -21293 is a privilege escalation vulnerability in Microsoft Windows 10 1507. Learn about its impact, affected versions, and mitigation methods.

    2026-05-23 12:15 UTC
  • Patch Tuesday May 2026: Security Updates & CVE Analysis
    web:zecurit.com

    Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

    2026-05-23 12:15 UTC
  • Mitigate RedSun Zero-Day Without A Patch | Qualys
    web:blog.qualys.com

    Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

    2026-06-03 07:49 UTC
  • Microsoft Releases KB5089573 for Windows 11 to Fix Patch Tuesday ...
    web:cybersecuritynews.com

    Microsoft has rolled out a new cumulative update, KB5089573, for Windows 11 versions 25H2 and 24H2, targeting a critical installation failure that affected users following the May 2026 Patch Tuesday release.

    2026-06-03 07:49 UTC
  • Microsoft Patch Tuesday, September 2025 Edition - Krebs on Security
    web:krebsonsecurity.com

    Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities ...

    2026-06-03 07:49 UTC
  • NVD - Home
    web:nvd.nist.gov

    The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...

    2026-06-03 07:49 UTC
  • February's Patch Tuesday release fixes 59 flaws ... - Computerworld
    web:www.computerworld.com

    Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...

    2026-06-03 07:49 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-12993.json.

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2026-05-01T20:53:33.161Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67968. Reason: This candidate is a reservation duplicate of CVE-2025-67968. Notes: All CVE users should reference CVE-2025-67968 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2025-12993",
    "dateRejected": "2026-05-01T20:53:33.161Z",
    "dateReserved": "2025-11-11T00:57:51.952Z",
    "dateUpdated": "2026-05-01T20:53:33.161Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}