CVE-2025-55686CWE-416

CVE-2025-55686

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

⚡ A crafty use-after-free in Windows PrintWorkflowUserSvc could let an authorized attacker crank up their privilege levels like they're getting an express upgrade on an airplane! ✈️ Think of it as a hotel check-in desk that mistakenly allows a guest to access all the VIP suites just because they mentioned a different room number—nobody verified their identity! This vulnerability could enable an attacker to gain elevated privileges locally, potentially allowing them to execute unauthorized commands, access sensitive files, or even manipulate system settings. The consequences could be quite severe, leaving your system vulnerable to serious breaches.

Put simply

Think of it as a hotel check-in desk that mistakenly allows a guest to access all the VIP suites just because they mentioned a different room number—nobody verified their identity! The use-after-free vulnerability in the Windows PrintWorkflowUserSvc occurs when the service mishandles memory, allowing an authorized user to exploit this flaw to escalate privileges on the system.

What to do

This vulnerability could enable an attacker to gain elevated privileges locally, potentially allowing them to execute unauthorized commands, access sensitive files, or even manipulate system settings. The consequences could be quite severe, leaving your system vulnerable to serious breaches. To shield your systems, ensure you patch to the latest version of Windows that addresses CVE-2025-55686. Regularly monitor permissions and audit who has access to your systems to minimize potential risks. You've got this! Follow these steps, and you'll keep your system secure and running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:15Z
Affected products (8)
ProductVersionsFixed in
microsoft/windows_10_21h2< 10.0.19044.645610.0.19044.6456
microsoft/windows_10_22h2< 10.0.19045.645610.0.19045.6456
microsoft/windows_11_23h2< 10.0.22631.606010.0.22631.6060
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2022< 10.0.20348.429410.0.20348.4294
microsoft/windows_server_2022_23h2< 10.0.25398.191310.0.25398.1913
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
    cvelistv5