NetSight
high7.8

CVE-2025-55224

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute c…

Impact

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.7792
MicrosoftWindows 10 21h2
before 10.0.19044.6332
MicrosoftWindows 10 22h2
before 10.0.19045.6332
MicrosoftWindows 11 22h2
before 10.0.22621.5909
MicrosoftWindows 11 23h2
before 10.0.22631.5909
MicrosoftWindows 11 24h2
before 10.0.26100.6508
MicrosoftWindows Server 2019
before 10.0.17763.7792
MicrosoftWindows Server 2022
before 10.0.20348.4106
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1849
MicrosoftWindows Server 2025
before 10.0.26100.6508

Weakness classification

References