Windows Search Service Elevation of Privilege Vulnerability in Microsoft Products

CVE-2025-21292

Summary

The Windows Search Service in Microsoft products contains a vulnerability that could allow an attacker to gain elevated privileges on a system. This flaw can be exploited when the compromised Windows Search Service fails to properly manage objects in memory. As a result, an unauthorized user could run arbitrary code with elevated permissions, potentially enabling them to install programs, view, change, or delete data, or create accounts with full user rights. To mitigate the risk, it is advised to apply the necessary patches provided by Microsoft.

References