CVE-2025-4044

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.

Score

CVSS 3.1 8.2 High

Status

Deferred - 7bc73191-a2b6-4c63-9918-753964601853

Published

2025-08-19

Last modified

2026-02-26

Weaknesses

CWE-611

Affected products

• Printer Software G2 (Lexmark)
• Universal Print Driver (Lexmark)

References

• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html