Race Condition Vulnerability in Windows Management Services by Microsoft
CVE-2025-59193

7HIGH

What is CVE-2025-59193?

A race condition vulnerability exists in Windows Management Services that allows an authorized attacker to execute code in a privileged context. By exploiting improper synchronization of shared resources, an attacker can elevate their local privileges, potentially gaining access to critical system functionalities and sensitive data. This flaw emphasizes the need for robust security measures and timely updates to mitigate associated risks.

Affected Version(s)

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919

Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.6456

Windows 10 Version 22H2 x64-based Systems 10.0.19045.0 < 10.0.19045.6456

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.