Privilege Escalation Vulnerability in Microsoft Windows QoS Scheduler

CVE-2025-49730

What is CVE-2025-49730?

A time-of-check time-of-use (TOCTOU) race condition in the Microsoft Windows QoS Scheduler may allow an authorized attacker to gain elevated privileges on the system. This vulnerability creates a window of opportunity for malicious actors to exploit the system by manipulating the timing of checks against access permissions and actions taken on the system. Users are encouraged to review the Microsoft security advisory for more details and recommendations on mitigation.

References