CVE-2025-55693CWE-416

CVE-2025-55693

High · published October 14, 2025

CVSS v3.1
7.4
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

⚡ A use after free bug in the Windows Kernel can let unauthorized attackers elevate their privileges locally! 🔥 Think of it like a construction worker who forgets to remove scaffolding after a job is done — the worker can still access higher floors without permission, creating a risky situation. This vulnerability allows the same sneaky access within your computer’s operating system. An attacker could exploit this flaw to gain higher-level permissions, potentially allowing them to manipulate system resources and even install malicious software. It is a doorway to unrestricted power on compromised machines, posing serious risks to your data and system integrity.

Put simply

Think of it like a construction worker who forgets to remove scaffolding after a job is done — the worker can still access higher floors without permission, creating a risky situation. This vulnerability allows the same sneaky access within your computer’s operating system. This vulnerability occurs when a program continues to use a memory location after it has been freed, allowing an attacker to potentially execute arbitrary code with elevated privileges on local systems. It affects the Windows Kernel, specifically.

What to do

An attacker could exploit this flaw to gain higher-level permissions, potentially allowing them to manipulate system resources and even install malicious software. It is a doorway to unrestricted power on compromised machines, posing serious risks to your data and system integrity. To mitigate this vulnerability, ensure your system is running the latest security patches for Windows. Regularly check for updates and consider implementing strict access controls to limit possible exploitation scenarios. You’ve got this! Stay vigilant, patch up, and you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02020 · 80.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:15Z
Affected products (3)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.689910.0.26100.6899
microsoft/windows_11_25h2< 10.0.26200.689910.0.26200.6899
microsoft/windows_server_2025< 10.0.26100.689910.0.26100.6899
References (1)
EPSS history
Timeline
  • 14 OCT 17:01Z
    Windows Kernel Elevation of Privilege Vulnerability
    cvelistv5