CVE-2025-2297 — Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This a — CVE Database · The Intelligence Room