{"vulnerability": "CVE-2025-4974", "sightings": [{"uuid": "77c5cd3c-d47e-478c-93b5-6707e9d53639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "24fa20b4-f4fd-4ce1-8c1d-a93aeac1585f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "461e0320-59db-42a3-a756-45bf5f48d4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lti5m76jyc2f", "content": "", "creation_timestamp": "2025-07-08T20:34:50.683168Z"}, {"uuid": "8776e560-de2f-4b5d-8716-b7d0fb2fde29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "48f6251e-d7f7-4ac8-b75f-29e95ae9ccca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "3b74d54d-a528-4d3d-9301-91e28af21843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-582/", "content": "", "creation_timestamp": "2025-07-08T03:00:00.000000Z"}, {"uuid": "426e32b3-a3d6-4055-b09c-430828b47b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "bd06d93a-03d1-4334-91eb-6aa45cd23b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49742", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-578/", "content": "", "creation_timestamp": "2025-07-08T03:00:00.000000Z"}, {"uuid": "af97d890-833d-4dd8-8567-5fc19820c517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "47b3b26d-fb59-44c4-961c-425ef730d43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "7031d035-d345-4193-a4c8-fcef4b7e294e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "654bc1c3-b67c-4fd4-ad45-d11687014a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "fef45598-819a-4927-a8e9-f286cc08fa5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "6bbd1448-0faf-4796-9f21-c4b0daf74d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49744", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3ltpam3ppyf23", "content": "", "creation_timestamp": "2025-07-11T16:17:07.096494Z"}, {"uuid": "1889c6fc-c04e-47c7-970a-eee377a1625e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "05d69186-0fa6-4525-84d3-aeb4af31f31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49742", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "26235bf3-f521-4cfb-b908-5e32f7b2d82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "dbcb7cce-debb-484a-b682-ede83bfe519a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/", "content": "", "creation_timestamp": "2025-07-08T22:53:33.000000Z"}, {"uuid": "bb94b9ad-16a4-47ca-9e50-bd8d9c0a8345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49744", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "8675f764-ea96-4566-baa9-b8d09a2c2f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49741", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "2831a3c5-48bb-4c5d-8843-dfaf0e0601f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review", "content": "", "creation_timestamp": "2025-07-08T15:56:31.000000Z"}, {"uuid": "9cebadbb-7605-4f17-a837-8411e0f74155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49744", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmwzit2k", "content": "", "creation_timestamp": "2025-07-17T21:02:36.918225Z"}, {"uuid": "1fae88ce-aa06-4893-a44b-9eadc9f99480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49746", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114875372066448190", "content": "", "creation_timestamp": "2025-07-18T17:17:51.640343Z"}, {"uuid": "fed8b517-7291-4b20-b118-eb1964ad0a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49747", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114875372066448190", "content": "", "creation_timestamp": "2025-07-18T17:17:51.766390Z"}, {"uuid": "5cb1bb0c-8152-4070-8aa1-5f751253cb4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lub3eldgvg2j", "content": "", "creation_timestamp": "2025-07-18T18:31:21.099773Z"}, {"uuid": "00991b5a-c9dd-4242-aefe-4aec64768e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lub3v7g5kx2w", "content": "", "creation_timestamp": "2025-07-18T18:40:39.037620Z"}, {"uuid": "a256204c-03fd-482f-b1cf-e00c259f5f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49747", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3lubwldstws22", "content": "", "creation_timestamp": "2025-07-19T02:38:19.065784Z"}, {"uuid": "e7927e94-aa73-4b6d-925f-f36c6cf0f748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49741", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lvhxuknlnb2n", "content": "", "creation_timestamp": "2025-08-03T05:42:32.951302Z"}, {"uuid": "07d31b34-1e39-4ff3-8514-f21396e87a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49741", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvm3qgfms42w", "content": "", "creation_timestamp": "2025-08-04T21:02:29.903465Z"}, {"uuid": "a5f33521-1172-466e-aa27-751294d22ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49743", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "3f5b8c0f-6fa4-4eaf-9711-b788758b35a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49745", "type": "seen", "source": "https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review", "content": "", "creation_timestamp": "2025-08-12T16:01:32.000000Z"}, {"uuid": "7476c4f8-8de8-4d8e-85d9-288ccda8ccaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49745", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3lwb7e3snwu2c", "content": "", "creation_timestamp": "2025-08-13T06:33:02.953804Z"}, {"uuid": "c1938cc7-0f53-4d61-a577-e109442222f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-497436", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0251", "content": "", "creation_timestamp": "2025-08-13T05:25:08.000000Z"}, {"uuid": "b6960292-bd2a-41bf-a62b-20580e77808c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lym2ccc3jn2c", "content": "", "creation_timestamp": "2025-09-12T00:52:14.256514Z"}, {"uuid": "3d0d46ef-b663-4a6a-bd50-cae89a3bbc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49741\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.\n\ud83d\udccf Published: 2025-07-01T22:22:07.595Z\n\ud83d\udccf Modified: 2025-07-01T22:22:07.595Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49741", "creation_timestamp": "2025-07-01T23:07:33.000000Z"}, {"uuid": "7be4f963-2c1a-4388-98a9-736f55a385e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49740", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "I just realized that I'm personally \"credited\" in April's Microsoft Patch Tuesday with a CVE-less \"Defense-in-depth\" update.\nThe vulnerability?CAB files downloaded from the internet do not write the MotW for files extracted from them.\nI reported this to MSRC, and after refusing to generate a screen recording of the exploit (I mean, really?!), they finally acknowledged the problem. However, they went radio silent after that.\nMark of the Web (MotW) evasions have gotten CVEs in the past. If we look in the last 2 years we have: CVE-2024-38213, CVE-2024-38217, CVE-2024-43487, CVE-2025-24061, CVE-2025-27472, CVE-2025-47160, CVE-2025-49740, CVE-2026-20824, CVE-2026-32225, CVE-2026-45595\nSo, why does \"Windows doesn't write MotW for extracted CAB file contents\" get a CVE?  Well, Microsoft is a CNA.  So for the most part they can invent any rules that they'd like to play by.  It could be as simple as \"We're not particularly fond of you\", and as a result, we have a vulnerability with no ID to track it.\nHere's a screen recording of a VM with March's Patch Tuesday level of updates.  When you extract a file from a CAB file, no MotW is written.  And as such, we get no protections that leverage the presence of MotW, such as SmartScreen, Smart Application Control, Office Protected View.  In this case, we have a .URL file in a CAB.  Double clicking on it results in a remote EXE running on your computer with no warning or other prompts.  But, I suppose we all know that URL files are evil and have them blocked.", "creation_timestamp": "2026-06-15T18:12:55.147404Z"}]}