CVE-2025-48464 - Exposure of Sensitive Information

Back Back to CVE browser

MEDIUM

Exposure of Sensitive Information

Published Oct 8, 2025

4.7

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information.

Affected products

Vendor DuckDuckGo Product DuckDuckGo Browser Default
n/a
- Version
  5.246.0 and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

DuckDuckGo

DuckDuckGo Browser

n/a

Version	Status	Constraints
5.246.0 and below	affected	-

Remediation

Vendor solution

Users of affected product versions are advised to update to DuckDuckGo version 5.247.0 immediately.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31840		Advisory
https://tuxplorer.com/posts/dont-leave-me-outdated/
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-097/