CVE-2025-59230

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2025
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 14, 2025
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-592317.8Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locaCVE-2025-592327.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-592337.8Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locaCVE-2025-592347.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-592357.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-592367.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-592378.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2025-592387.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-59244.3The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2CVE-2025-592405.5Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose informationCVE-2025-592417.8Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attaCVE-2025-592427.8Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.