CVE-2025-60717CWE-416

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

⚡ An unauthorized local attacker can exploit a use-after-free vulnerability in Windows Broadcast DVR User Service to elevate privileges! Think of it like a conference room where someone forgot to check if the last person left the meeting—anyone can waltz in and claim authority, even if they shouldn't be there! 🎤 This means an attacker could potentially gain access to higher system privileges, allowing them to execute arbitrary commands or modify system files. Talk about a dangerous game of musical chairs with your system's security!

Put simply

Think of it like a conference room where someone forgot to check if the last person left the meeting—anyone can waltz in and claim authority, even if they shouldn't be there! 🎤 This vulnerability arises from improper memory management in the Windows Broadcast DVR User Service, where memory that has been freed is accessed again, leading to possible privilege escalation.

What to do

This means an attacker could potentially gain access to higher system privileges, allowing them to execute arbitrary commands or modify system files. Talk about a dangerous game of musical chairs with your system's security! To secure your system, apply the latest Windows updates immediately. Regularly review your access controls and monitor for suspicious activities. Don't wait—make sure you're protected! 🛡️ You've got this! Implement these steps and keep your system strong! 💪🎉

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-416 · Use After Free
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
    cvelistv5