← Back to CVE List
Vulnerability Intelligence Report
Windows Kernel Elevation of Privilege Vulnerability

CVE-2025-62215

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CISA KEV SSVC: Active Exploitation
CVSS Base Score
7.0
HIGH
Exploitability:1.1
Impact Score:5.9
EPSS Probability:6.10%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-362 ↗CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-415 ↗CWE-415: Double Free

Affected Products & Versions

Vendor Product Affected Versions
Microsoft Windows 10 Version 1809 10.0.17763.0 < 10.0.17763.8027 (affected)
Microsoft Windows 10 Version 21H2 10.0.19044.0 < 10.0.19044.6575 (affected)
Microsoft Windows 10 Version 22H2 10.0.19045.0 < 10.0.19045.6575 (affected)
Microsoft Windows 11 version 22H3 10.0.22631.0 < 10.0.22631.6199 (affected)
Microsoft Windows 11 Version 23H2 10.0.22631.0 < 10.0.22631.6199 (affected)
Microsoft Windows 11 Version 24H2 10.0.26100.0 < 10.0.26100.7171 (affected)
Microsoft Windows 11 Version 25H2 10.0.26200.0 < 10.0.26200.7171 (affected)
Microsoft Windows Server 2019 10.0.17763.0 < 10.0.17763.8027 (affected)
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 < 10.0.17763.8027 (affected)
Microsoft Windows Server 2022 10.0.20348.0 < 10.0.20348.4405 (affected)
Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.0 < 10.0.25398.1965 (affected)
Microsoft Windows Server 2025 10.0.26100.0 < 10.0.26100.7171 (affected)
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 < 10.0.26100.7171 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
EPSS Score
6.100%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMicrosoft Corporation · Vendor · USA
Reserved2025-10-08T20:10:09
Published2025-11-11T17:59:48
Patch Date2025-11-11
Last Updated2026-02-26T16:57:17

LINK COPIED TO CLIPBOARD