CVE-2025-59516

HIGH

Windows Storage VSP Driver - Privilege Escalation

Title source: llm

Description

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 37.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-306 CWE-73
Status published

Affected Products (11)

microsoft/windows_10_1809 < 10.0.17763.8146
microsoft/windows_10_1809 < 10.0.17763.8146
microsoft/windows_10_21h2 < 10.0.19044.6691
microsoft/windows_10_22h2 < 10.0.19045.6691
microsoft/windows_11_23h2 < 10.0.22631.6345
microsoft/windows_11_24h2 < 10.0.26100.7392
microsoft/windows_11_25h2 < 10.0.26200.7392
microsoft/windows_server_2019 < 10.0.17763.8146
microsoft/windows_server_2022 < 10.0.20348.4467
microsoft/windows_server_2022_23h2 < 10.0.25398.2025
microsoft/windows_server_2025 < 10.0.26100.7392

Timeline

Published Dec 09, 2025
Tracked Since Feb 18, 2026