Privilege Escalation Vulnerability in Kernel Streaming WOW Thunk Service Driver by Microsoft
CVE-2025-49675
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-49675?
A vulnerability exists in the Kernel Streaming WOW Thunk Service Driver that can be exploited by an authorized attacker to elevate their privileges locally. By leveraging the use-after-free condition, the attacker may gain unauthorized access to sensitive system-level operations, potentially compromising the system's security. This flaw necessitates immediate attention to safeguard affected Windows operating systems against local exploitation.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558