BaseFortify

Publication date: 2025-10-14

Last updated on: 2025-10-22

Assigner: Microsoft Corporation

Description

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-14

Last Modified

2025-10-22

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-59497

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	defender_for_endpoint	to 101.25032.0010 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Linux. It allows an authorized attacker to exploit a timing issue between checking a condition and using the result, potentially causing a denial of service locally.

Impact Analysis

The vulnerability can impact you by allowing an authorized attacker to cause a denial of service on the affected system locally, potentially disrupting the normal operation of Microsoft Defender for Linux.

Hi! I’m here to help you understand CVE-2025-59497. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70