CVE-2025-55689CWE-416

CVE-2025-55689

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

⚡ This sneaky use after free vulnerability in Windows PrintWorkflowUserSvc could let an authorized attacker elevate their privileges without breaking a sweat! Think of it like a librarian who mistakenly leaves the door to the restricted archives wide open—if someone knows how to wiggle through, they can access sensitive documents without a key! 📚 An attacker could exploit this vulnerability to gain higher privileges on the local system, potentially allowing them to control operations, access sensitive data, or install malicious software. The stakes are high, as this could lead to devastating consequences for your system's integrity! ⚠️

Put simply

Think of it like a librarian who mistakenly leaves the door to the restricted archives wide open—if someone knows how to wiggle through, they can access sensitive documents without a key! 📚 This use after free issue occurs when the PrintWorkflowUserSvc service fails to manage memory correctly, leading to the potential for privilege escalation by an authorized user. It opens the door for attackers to manipulate system functions that should remain protected.

What to do

An attacker could exploit this vulnerability to gain higher privileges on the local system, potentially allowing them to control operations, access sensitive data, or install malicious software. The stakes are high, as this could lead to devastating consequences for your system's integrity! ⚠️ To protect your system, ensure that Windows is updated to the latest version with patches installed. Regularly review user permissions and consider restricting access to sensitive services. Stay vigilant! 🛡️ You've got this! Address these steps, and you'll be one step closer to securing your system. 🚀

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:15Z
Affected products (9)
ProductVersionsFixed in
microsoft/windows_10_21h2< 10.0.19044.645610.0.19044.6456
microsoft/windows_10_22h2< 10.0.19045.645610.0.19045.6456
microsoft/windows_11_22h2< 10.0.22621.606010.0.22621.6060
microsoft/windows_11_23h2< 10.0.22631.606010.0.22631.6060
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2022< 10.0.20348.429410.0.20348.4294
microsoft/windows_server_2022_23h2< 10.0.25398.191310.0.25398.1913
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
    cvelistv5