CVE-2025-47985

Published Jul 8, 2025

Last updated 9 months ago

CVSS high 7.8

Overview

Description: Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-822

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 9

Some of the bugs I disclosed to MSRC last year is now public on the company's advisory page. E.g: CVE-2025-47985 Windows Event Tracing Elevation of Privilege https://t.co/G6eCy2E1kt
@cplearns2h4ck
19 Apr 2026
5148 Impressions
28 Retweets
79 Likes
26 Bookmarks
3 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "9D58CEDA-0611-4E21-87AF-C368F45BB685",
            "versionEndExcluding": "10.0.10240.21073",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "1EEA1F09-0FA7-4946-8005-F0CF177B1103",
            "versionEndExcluding": "10.0.10240.21073",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "3CEAC32A-5246-4F6B-8DD5-E49F3BA621DA",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "E0A0243D-52B4-49AE-B1AE-263640C492B0",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "2062C268-282B-4E52-9F8C-876A2D483EAD",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "00FCA704-C6E0-4DE4-86F0-80552527AE53",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "50848190-CF61-47F6-90B8-DB0C120749F5",
            "versionEndExcluding": "10.0.19044.6093",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "01E62E99-5EDA-487C-A941-E2DA348B501F",
            "versionEndExcluding": "10.0.19045.6093",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "76FEE1E8-EB22-4E01-86D7-13B35F9D2876",
            "versionEndExcluding": "10.0.22621.5624",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "19D0DAB7-4BFF-4BB7-9E0E-B020CF8573C9",
            "versionEndExcluding": "10.0.22631.5624",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8E866DB2-9CA7-4BCC-8591-9BC94300B779",
            "versionEndExcluding": "10.0.26100.4652",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F6FA4941-0641-4EA0-99A8-97121F625380",
            "versionEndExcluding": "10.0.14393.8246",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "DCFD9FA0-D149-422A-975C-582C9BC9024D",
            "versionEndExcluding": "10.0.17763.7558",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "AE46D39E-7048-4A31-9753-39F6E5F97D1D",
            "versionEndExcluding": "10.0.20348.3932",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "613302B8-D5C2-4908-9FC9-0EC1650D4517",
            "versionEndExcluding": "10.0.25398.1732",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "10E640FB-32AB-45B6-BC42-56CC587C0A35",
            "versionEndExcluding": "10.0.26100.4652",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.