PT-2025-42035 · Microsoft · Windows

Published 2025-10-14 · Updated 2025-10-27 · CVE-2025-55685

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows versions (affected versions not specified)

Description A use-after-free condition exists in the Windows PrintWorkflowUserSvc component. This occurs when a program uses a pointer to memory after it has been freed, potentially leading to arbitrary code execution or privilege escalation. An attacker with local access can exploit this flaw to elevate privileges on the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-14054

CVE-2025-55685

Affected Products

Windows

References · 9

• https://osv.dev/vulnerability/CVE-2025-55685 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55685 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55685 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-55685 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14054 · Security Note
• https://twitter.com/CveTodo/status/1978179765266682051 · Twitter Post
• https://t.me/cveNotify/140500 · Telegram Post
• https://twitter.com/CVEnew/status/1978198278542934131 · Twitter Post