Elevation of Privilege Vulnerability in Windows Shell by Microsoft
CVE-2025-49679
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-49679?
A numeric truncation error in Microsoft Windows Shell can be exploited by an authorized attacker to gain elevated privileges locally. This vulnerability poses a risk as it allows attackers to perform unauthorized actions by leveraging the truncated data. It's crucial for users and administrators to keep systems updated and apply security patches to mitigate such vulnerabilities.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558