CVE-2025-54114

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-822

Affected software

No affected versions have been published.

Timeline

Published: Sep 9, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-541157.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker CVE-2025-541167.3Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.CVE-2025-541175.4NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC CVE-2025-541185.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information disclosure in NamelessMC before 2 CVE-2025-5411910.0ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below CVE-2025-54125.4A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file s CVE-2025-541209.3PCL (Plain Craft Launcher) Community Edition is a Minecraft launcher. In PCL CE versions 2.12.0-beta.5 to 2.12.0-beta.9, the login credentia CVE-2025-541215.3Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Pytho CVE-2025-5412210.0Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been id CVE-2025-541239.8Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to comm CVE-2025-541246.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and CVE-2025-541256.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and