High · published December 9, 2025
⚡ A crafty attacker could gain local admin privileges through a simple access control oversight! 🚨 Think of it like a hotel guest who finds an open door to the staff-only area — the unauthorized guest can now access all the behind-the-scenes operations, potentially wreaking havoc! 🏨 If exploited, this vulnerability could allow an attacker to elevate their privileges locally, giving them access to sensitive data, system configurations, and the ability to make harmful changes. This could lead to a complete security breach, exposing critical system functions and user data to unauthorized users!
Think of it like a hotel guest who finds an open door to the staff-only area — the unauthorized guest can now access all the behind-the-scenes operations, potentially wreaking havoc! 🏨 The CVE-2025-59517 vulnerability stems from improper access control in the Windows Storage VSP Driver, permitting authorized users to escalate their privileges without proper restrictions in place.
If exploited, this vulnerability could allow an attacker to elevate their privileges locally, giving them access to sensitive data, system configurations, and the ability to make harmful changes. This could lead to a complete security breach, exposing critical system functions and user data to unauthorized users! To mitigate this vulnerability, ensure your systems are updated to the latest patches provided by Microsoft. Regularly audit user permissions and enforce least privilege access policies to limit potential exploitation. 🛡️ You can handle this! Stay proactive with updates and audits, and you'll keep your systems secure! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2016 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |