Elevation of Privilege in Windows SDK by Microsoft
CVE-2025-47962

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows Sdk
Vendor
CVE Published:
10 June 2025

What is CVE-2025-47962?

A vulnerability in the Windows SDK has been identified that permits an authorized attacker to elevate their privileges locally. This exploit would allow malicious users to gain unauthorized access to system functions and sensitive information, undermining the integrity of the operating system and affecting overall user security.

Affected Version(s)

Windows SDK Unknown 26100 < 10.0.26100.4188

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.