PT-2025-10819 · Microsoft · Windows Cross Device Service+1

John Ostrowski · Published 2025-03-11 · Updated 2026-06-14 · CVE-2025-24076

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows 11 version 22H2 Microsoft Windows versions prior to 10.0.22621.0

Description An improper access control issue exists within the Windows Cross Device Service. This allows an authorized attacker to gain elevated privileges locally. The vulnerability enables attackers to potentially affect the system and rapidly escalate to administrator privileges, with some reports indicating this can occur within 300 milliseconds. A proof-of-concept (PoC) exploit is available. The issue stems from flaws in access control within the Cross Device Service.

Recommendations Microsoft Windows 11 version 22H2: Update to version 10.0.22621.0 or later. Microsoft Windows versions prior to 10.0.22621.0: Update to the latest available version.

Exploit

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-02565

BDU:2025-02713

CVE-2025-24076

Affected Products

Windows

Windows Cross Device Service

References · 37

• 🔥 https://exploit-db.com/exploits/52320 · Exploit
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24076 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02713 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24994 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02565 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24076 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24076 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24076 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24076 · Security Note
• https://t.me/purp_sec/523 · Telegram Post
• https://twitter.com/dailytechonx/status/1912619510160605492 · Twitter Post
• https://twitter.com/windowsforum/status/1912404446857855163 · Twitter Post
• https://t.me/proxy_bar/2593 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1k1ds1z/top_10_trending_cves_17042025 · Reddit Post
• https://twitter.com/Dinosn/status/1912332018022555730 · Twitter Post