CVE-2025-62218

HighCVSS 7.0/10Last modified Oct 18, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-622197.0Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.CVE-2025-62229.8The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet theme for WordPress is vulnerable to aCVE-2025-622208.8Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.CVE-2025-622217.8Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2025-622228.8Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an uCVE-2025-622234.3User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing CVE-2025-622243.5User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofinCVE-2025-622258.4Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write perCVE-2025-622288.8Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted taCVE-2025-622297.3A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notiCVE-2025-622307.3A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain dCVE-2025-622317.3A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function ca