CVE-2025-55691CWE-416

CVE-2025-55691

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

⚡ An authorized attacker can elevate privileges with a simple action! This use after free vulnerability in Windows PrintWorkflowUserSvc could let them gain more control than intended. 🔥 Think of it like a restaurant where a waiter mistakenly leaves the door to the kitchen open. An authorized employee could easily step in, access valuable ingredients, and even change the recipes without anyone noticing! If exploited, an attacker could gain elevated privileges on your system, opening the door to unauthorized actions. They could manipulate system settings, access sensitive information, or even install malicious software, leading to a significant breach of trust and security.

Put simply

Think of it like a restaurant where a waiter mistakenly leaves the door to the kitchen open. An authorized employee could easily step in, access valuable ingredients, and even change the recipes without anyone noticing! This vulnerability occurs due to a use after free error in the Windows PrintWorkflowUserSvc, allowing attackers to exploit memory that is no longer valid. It can enable local privilege escalation for those with authorized access, which is surprisingly dangerous.

What to do

If exploited, an attacker could gain elevated privileges on your system, opening the door to unauthorized actions. They could manipulate system settings, access sensitive information, or even install malicious software, leading to a significant breach of trust and security. To mitigate this risk, ensure you update to the latest Windows security patches provided by Microsoft. Additionally, review your user access policies to limit unnecessary authorizations and monitor for unusual activities. Don't forget to conduct regular security audits! You've got this! Stay proactive and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:15Z
Affected products (3)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
EPSS history
Timeline
  • 14 OCT 17:01Z
    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
    cvelistv5