Access Control Flaw in Network Connection Status Indicator by Microsoft
CVE-2025-59201
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-59201?
A vulnerability exists in the Network Connection Status Indicator (NCSI) that permits an authorized attacker to gain elevated privileges locally. This flaw stems from inadequate access controls, potentially allowing unauthorized users to exploit the system. The vulnerability underscores the importance of robust security measures to prevent unauthorized access and protect sensitive systems.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8519
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919