high7.0Known exploitedPublic exploit code
CVE-2025-62215
Microsoft Windows Race Condition Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-11-12. Federal due date: 2025-12-03.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Windows Kernel - Elevation of Privilege2026-04-06 · local · windows
Impact
Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 1809 | before 10.0.17763.8027 |
| Microsoft | Windows 10 21h2 | before 10.0.19044.6575 |
| Microsoft | Windows 10 22h2 | before 10.0.19045.6575 |
| Microsoft | Windows 11 23h2 | before 10.0.22631.6199 |
| Microsoft | Windows 11 24h2 | before 10.0.26100.7092 |
| Microsoft | Windows 11 25h2 | before 10.0.26200.7092 |
| Microsoft | Windows Server 2019 | before 10.0.17763.8027 |
| Microsoft | Windows Server 2022 | before 10.0.20348.4346 |
| Microsoft | Windows Server 2022 23h2 | before 10.0.25398.1965 |
| Microsoft | Windows Server 2025 | before 10.0.26100.7092 |