Type Confusion Vulnerability in Windows SSDP Service by Microsoft
CVE-2025-48815
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-48815?
The Windows SSDP Service is vulnerable to a type confusion issue, which could allow an authorized attacker to elevate their privileges on the system. This security flaw enables attackers to exploit the SSDP service to gain unauthorized access to critical system resources, potentially leading to further attacks within the affected Windows environment. For more information, you can review the detailed vendor advisory.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558