CVE-2025-62220CWE-122

CVE-2025-62220

High · published November 11, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow in the Windows Subsystem for Linux GUI means an unauthorized attacker could execute malicious code over the network! 🔥 Think of it like a restaurant kitchen where a delivery driver can sneak in a surprise ingredient without anyone checking the order. If the kitchen accepts it, well, it could lead to a disastrous meal! An attacker exploiting this vulnerability could run arbitrary code on the affected system, potentially compromising sensitive data or disrupting system operations. The ramifications could be absolutely devastating, allowing attackers to gain unauthorized access and control over your system!

Put simply

Think of it like a restaurant kitchen where a delivery driver can sneak in a surprise ingredient without anyone checking the order. If the kitchen accepts it, well, it could lead to a disastrous meal! This vulnerability arises from improper handling of memory allocation in the heap, allowing an attacker to overflow the buffer and execute arbitrary code remotely.

What to do

An attacker exploiting this vulnerability could run arbitrary code on the affected system, potentially compromising sensitive data or disrupting system operations. The ramifications could be absolutely devastating, allowing attackers to gain unauthorized access and control over your system! To protect yourself, apply the latest security patches from Microsoft for Windows Subsystem for Linux. Additionally, consider reviewing your network's security settings to limit unauthorized access. Regularly audit and monitor your systems to catch any suspicious activity early! You've got this! With a few quick updates, you'll have your systems fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-11-11T23:15Z
Affected products (1)
ProductVersionsFixed in
microsoft/windows_subsystem_for_linux< 2.6.22.6.2
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Subsystem for Linux GUI Remote Code Execution Vulnerability
    cvelistv5