Race Condition Vulnerability in Microsoft Wireless Provisioning System
CVE-2025-62218

7HIGH

What is CVE-2025-62218?

A race condition exists in the Microsoft Wireless Provisioning System, enabling an authorized attacker to exploit improper synchronization of shared resources. This flaw potentially allows the attacker to elevate their privileges locally, posing a significant risk to system integrity. Organizations must ensure timely updates and apply security measures to mitigate this vulnerability.

Affected Version(s)

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8594

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.8027

Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.6575

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-62218 : Race Condition Vulnerability in Microsoft Wireless Provisioning System