Skip to content

CVE · Exploited · On CISA KEV

CVE-2025-62215

Microsoft Windows Race Condition Vulnerability

7.0
CVSS 3.1
1
story
NOV 12
added to KEV
Severity
7.0 High · vendor score
Vendor
Microsoft
Product
Windows
Published
Nov 11, 2025
Added to KEV
Nov 12, 2025
KEV deadline
Dec 3, 2025
Ransomware use
Unknown
Weakness
CWE-362, CWE-415

What it is

Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesMicrosoft Warns of Exploited Windows Kernel Zero-DayThe important-severity flaw (CVE-2025-62215) has been exploited, said Microsoft.LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215