CVE-2025-59193
Windows Management Services Elevation of Privilege Vulnerability
At a glance Severity HIGH 7.0 EPSS EPSS 0.19 % · percentile 9 (2026-10-27) State PUBLISHED Published 2025-10-14 Updated 2026-02-26 Assigner microsoft NVD status Analyzed Description Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C microsoft CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · secure@microsoft.com (Secondary) CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* < 10.0.19044.6456cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* < 10.0.19045.6456cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* < 10.0.22621.6060cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* ≤ 10.0.22631.6060cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* < 10.0.26100.6899cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* < 10.0.26200.6899cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* < 10.0.20348.4294cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* < 10.0.25398.1913cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* ≤ 10.0.26100.6899Affected products
References
Sources
