CVE-2025-59193
Windows Management Services Elevation of Privilege Vulnerability
En bref Sévérité HIGH 7.0 EPSS EPSS 0.19 % · centile 9 (2026-10-27) État PUBLISHED Publiée 2025-10-14 Mise à jour 2026-02-26 Attribuée par microsoft Statut NVD Analyzed Description Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C microsoft CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · secure@microsoft.com (Secondary) CVSS 3.1 HIGH 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* < 10.0.19044.6456cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* < 10.0.19045.6456cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* < 10.0.22621.6060cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* ≤ 10.0.22631.6060cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* < 10.0.26100.6899cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* < 10.0.26200.6899cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* < 10.0.17763.7919cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* < 10.0.20348.4294cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* < 10.0.25398.1913cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* ≤ 10.0.26100.6899Produits affectés
Références
Sources
