CVE-2025-59196

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-591975.5Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally.CVE-2025-591985.0Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.CVE-2025-591997.8Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.CVE-2025-59207.5The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET paraCVE-2025-592007.7Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthoCVE-2025-592017.8Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.CVE-2025-592027.0Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2025-592035.5Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locallCVE-2025-592045.5Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.CVE-2025-592057.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorCVE-2025-592067.4Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCVE-2025-592077.8Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.