CVE-2025-59515CWE-416

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

⚡ A crafty use-after-free vulnerability in the Windows Broadcast DVR User Service can turn your authorized access into local privilege escalation — yikes! 😱 Think of it like a restaurant where a waiter mistakenly hands you the keys to the kitchen after you’ve already eaten — suddenly, you can access and change everything without proper clearance! An attacker could exploit this vulnerability to elevate their privileges, effectively taking control of your system as if they were an admin. This could lead to unauthorized access to sensitive data or the ability to execute malicious actions, creating absolute chaos!

Put simply

Think of it like a restaurant where a waiter mistakenly hands you the keys to the kitchen after you’ve already eaten — suddenly, you can access and change everything without proper clearance! This vulnerability arises from a use-after-free flaw, where memory is freed but still accessible, allowing an attacker with local access to manipulate and elevate their privileges on the system.

What to do

An attacker could exploit this vulnerability to elevate their privileges, effectively taking control of your system as if they were an admin. This could lead to unauthorized access to sensitive data or the ability to execute malicious actions, creating absolute chaos! To safeguard your system, immediately apply the latest security patches for the Windows Broadcast DVR User Service. Regularly audit user permissions and monitor for any unusual activity to ensure your defenses are strong. You've got this! Stay vigilant and follow these steps to secure your system like a pro! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-416 · Use After Free
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
    cvelistv5