PT-2025-32234 · Microsoft · Windows Subsystem For Linux

Nelson William Gamazo Sanchez + 1 · Published 2025-08-06 · Updated 2025-08-15 · CVE-2025-53788

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WSL version 2.5.10

Description Microsoft addressed a critical security flaw in Windows Subsystem for Linux (WSL). Details about the issue were initially withheld but are scheduled for release on August 12.

Recommendations Update to version 2.5.10.

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-10146

CVE-2025-53788

ZDI-25-844

Affected Products

Windows Subsystem For Linux

References · 14

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53788 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-844 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53788 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53788 · Security Note
• https://bdu.fstec.ru/vul/2025-10146 · Security Note
• https://t.me/cKure/16125 · Telegram Post
• https://twitter.com/nerds_xyz/status/1953259846142157169 · Twitter Post
• https://twitter.com/CVEnew/status/1955322623820206142 · Twitter Post
• https://roboshadow.com/blog/patch-tuesday-august-2025?rid=socialpost · Reddit Post
• https://twitter.com/windowsforum/status/1953240171144470931 · Twitter Post
• https://t.me/CVEtracker/29812 · Telegram Post
• https://twitter.com/windowsforum/status/1955344336012321172 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1955339752967668068 · Twitter Post
• https://twitter.com/CTI131/status/1956271119725744625 · Twitter Post