CVE-2025-27475

HIGH

Windows Update Stack - Privilege Escalation

Title source: llm

Description

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.

References (1)

Scores

CVSS v3 7.0
EPSS 0.0023
EPSS Percentile 45.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-591
Status published

Affected Products (3)

microsoft/windows_11_22h2 < 10.0.22621.5189
microsoft/windows_11_23h2 < 10.0.22631.5189
microsoft/windows_11_24h2 < 10.0.26100.3775

Timeline

Published Apr 08, 2025
Tracked Since Feb 18, 2026