CVE-2025-62215

Published Nov 11, 2025

Last updated 14 hours ago

Windows Kernel

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-62215 is an elevation-of-privilege vulnerability affecting the Windows Kernel. It stems from a race condition due to improper synchronization when multiple processes concurrently access shared resources. An attacker with local access and some level of system access can exploit this flaw to execute code with elevated privileges, potentially gaining SYSTEM-level access. The vulnerability is triggered by exploiting a race condition in the Windows Kernel's memory management subsystem. By carefully timing multiple threads or processes, an attacker can manipulate shared kernel resources to cause a double-free condition, potentially leading to memory corruption. This allows the attacker to execute arbitrary code in the kernel's context.

Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7
Impact score: 5.9
Exploitability score: 1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-362

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 40

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231",
            "versionEndExcluding": "10.0.17763.8027"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396",
            "versionEndExcluding": "10.0.17763.8027"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D",
            "versionEndExcluding": "10.0.19044.6575"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55",
            "versionEndExcluding": "10.0.19045.6575"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913",
            "versionEndExcluding": "10.0.22631.6199"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815",
            "versionEndExcluding": "10.0.26100.7092"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140",
            "versionEndExcluding": "10.0.26200.7092"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C",
            "versionEndExcluding": "10.0.17763.8027"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1",
            "versionEndExcluding": "10.0.20348.4346"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB",
            "versionEndExcluding": "10.0.25398.1965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772",
            "versionEndExcluding": "10.0.26100.7092"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.