CVE-2025-59508

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.8594
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.8027
MicrosoftWindows 10 Version 21H2>= 10.0.19044.0, < 10.0.19044.6575
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.6575
MicrosoftWindows 11 version 22H3>= 10.0.22631.0, < 10.0.22631.6199
MicrosoftWindows 11 Version 23H2>= 10.0.22631.0, < 10.0.22631.6199
MicrosoftWindows 11 Version 24H2>= 10.0.26100.0, < 10.0.26100.7171
MicrosoftWindows 11 Version 25H2>= 10.0.26200.0, < 10.0.26200.7171
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.8594
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.8594
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.8027
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.8027
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.4405
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)>= 10.0.25398.0, < 10.0.25398.1965
MicrosoftWindows Server 2025>= 10.0.26100.0, < 10.0.26100.7171
MicrosoftWindows Server 2025 (Server Core installation)>= 10.0.26100.0, < 10.0.26100.7171

References

Timeline

Published
Nov 11, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-595095.5Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.CVE-2025-595105.5Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attaCVE-2025-595117.8External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.CVE-2025-595127.8Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.CVE-2025-595135.5Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.CVE-2025-595147.8Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2025-595157.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2025-595167.8Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.CVE-2025-595177.8Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.CVE-2025-595188.0In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ CVE-2025-59527.3A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta. This issue affects the function exec of the CVE-2025-595246.1Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow performs validation
CVE-2025-59508: High severity, CVSS 7.0 | Vulnix