CVE-2025-55688CWE-416

CVE-2025-55688

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

⚡ A local privilege escalation vulnerability is lurking in Windows PrintWorkflowUserSvc, waiting for just the right moment! Think of it like a sneaky service worker who finds a way to access the VIP lounge without the proper credentials — they can then enjoy all the perks and privileges without anyone stopping them! An attacker with local access could exploit this vulnerability to elevate their privileges, gaining control over sensitive parts of the system. This could lead to devastating actions like accessing confidential data, installing malicious software, or modifying system settings without authorization!

Put simply

Think of it like a sneaky service worker who finds a way to access the VIP lounge without the proper credentials — they can then enjoy all the perks and privileges without anyone stopping them! This use-after-free flaw in Windows PrintWorkflowUserSvc allows unauthorized users to bypass security measures and elevate their privileges by exploiting a memory management issue.

What to do

An attacker with local access could exploit this vulnerability to elevate their privileges, gaining control over sensitive parts of the system. This could lead to devastating actions like accessing confidential data, installing malicious software, or modifying system settings without authorization! Make sure to apply the latest security patches provided by Microsoft to mitigate this vulnerability. Regularly audit local user permissions and ensure robust access controls are in place to limit potential exploit opportunities. Don't worry, security hero! By staying vigilant and following these steps, you'll keep your systems safeguarded from this threat! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.2th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:15Z
Affected products (3)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
EPSS history
Timeline
  • 14 OCT 17:01Z
    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
    cvelistv5