CVE-2025-55232 - Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Back Back to CVE browser

CRITICAL

Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Published Sep 9, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 2.06%

Description

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

Affected products

Vendor Microsoft Product Microsoft HPC Pack 2019 Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  <6.3.8352 Quick Fix QFE

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft HPC Pack 2019

n/a

Version	Status	Constraints
1.0.0	affected	<6.3.8352 Quick Fix QFE

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55232
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55232		vendor-advisorypatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 9, 2025

Updated Feb 20, 2026

Reserved Aug 11, 2025

Link CVE-2025-55232

CISA Vulnrichment

Updated Sep 9, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-55232

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-55232