Vulnerability Details CVE-2025-0286
Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.2%
CVSS Severity
CVSS v3 Score 8.4
References
Products affected by CVE-2025-0286
-
cpe:2.3:a:paragon-software:paragon_backup_&_recovery:*
-
cpe:2.3:a:paragon-software:paragon_disk_wiper:*
-
cpe:2.3:a:paragon-software:paragon_drive_copy:*
-
cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*
-
cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*
-
cpe:2.3:a:paragon-software:paragon_partition_manager:*