CVE-2025-50175CWE-416

Windows Digital Media Elevation of Privilege Vulnerability

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

⚡ A crafty attacker can elevate their privileges locally by exploiting a use-after-free vulnerability in Windows Digital Media! 🔥 Think of it like a restaurant where a waiter forgets to remove an empty plate from a table. Another diner can suddenly take advantage of the oversight and grab something from the next table without permission — that’s the risk here! An attacker could gain unauthorized access to sensitive system components, allowing them to perform actions reserved for higher-level users. This could lead to data breaches or full control over the affected system, which is absolutely devastating!

Put simply

Think of it like a restaurant where a waiter forgets to remove an empty plate from a table. Another diner can suddenly take advantage of the oversight and grab something from the next table without permission — that’s the risk here! This vulnerability occurs when the system fails to properly manage memory, allowing an authorized user to exploit freed memory locations for privilege escalation.

What to do

An attacker could gain unauthorized access to sensitive system components, allowing them to perform actions reserved for higher-level users. This could lead to data breaches or full control over the affected system, which is absolutely devastating! Make sure to apply the latest patch provided by Microsoft immediately to mitigate this risk. Additionally, review user permissions and monitor for any unusual activity to bolster security. 🔒 This is fixable! Stay proactive, and you’ll have your defenses up in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows Digital Media Elevation of Privilege Vulnerability
    cvelistv5