Elevation of Privileges Vulnerability in Windows Mobile Broadband by Microsoft
CVE-2025-29811

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows 11 Version 22h2
Windows Server 2025 (server Core Installation)
Windows 11 Version 22h3
Windows 11 Version 23h2
Vendor
CVE Published:
8 April 2025

What is CVE-2025-29811?

An improper input validation vulnerability exists in the Windows Mobile Broadband driver, which can lead to unauthorized elevation of privileges for an attacker with local access. By exploiting this flaw, an attacker can gain elevated permissions and execute arbitrary commands, potentially compromising the system. It is crucial for users to apply security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Windows 11 version 22H2 ARM64-based Systems 10.0.22621.0 < 10.0.22621.5189

Windows 11 version 22H3 ARM64-based Systems 10.0.22631.0 < 10.0.22631.5189

Windows 11 Version 23H2 x64-based Systems 10.0.22631.0 < 10.0.22631.5189

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.