NetSight
high7.3

CVE-2025-55236

Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.

Impact

Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.7792
MicrosoftWindows 10 21h2
before 10.0.19044.6332
MicrosoftWindows 10 22h2
before 10.0.19045.6332
MicrosoftWindows 11 22h2
before 10.0.22621.5909
MicrosoftWindows 11 23h2
before 10.0.22631.5909
MicrosoftWindows 11 24h2
before 10.0.26100.6508
MicrosoftWindows Server 2019
before 10.0.17763.7792
MicrosoftWindows Server 2022
before 10.0.20348.4106
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1849
MicrosoftWindows Server 2025
before 10.0.26100.6508

Weakness classification

References