PT-2025-46508 · Microsoft · Windows Kernel +1

Published 2025-11-11 · Updated 2025-11-30 · CVE-2025-62215

Positive Technologies · (AI Summary)

CVSS v3.1

7.0

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to November 2025 Patch Tuesday

Description A race condition exists within the Windows Kernel, allowing a locally authorized attacker to elevate privileges. This issue, actively exploited in the wild, involves improper synchronization when accessing shared resources. Successful exploitation requires an attacker to win a race condition, potentially granting them SYSTEM-level privileges. Reports indicate that threat actors are already weaponizing this flaw. Approximately 31 articles from various internet sources have been published regarding this vulnerability, highlighting its significance. The vulnerability allows attackers to manipulate memory management, potentially leading to kernel heap corruption and hijacking system execution flow.

Recommendations Apply the November 2025 Patch Tuesday updates immediately to all affected systems.

Fix

LPE

RCE

Race Condition

Double Free

Weakness Enumeration

CWE-362

CWE-415

Related Identifiers

BDU:2025-14039

CVE-2025-62215

Affected Products

Windows

Windows Kernel

References · 85

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62215 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-62215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62215 · Security Note
• https://bdu.fstec.ru/vul/2025-14039 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-62215 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/1988663028540195003 · Twitter Post
• https://twitter.com/transilienceai/status/1990660551060414906 · Twitter Post
• https://twitter.com/cyber_sec_raj/status/1989573831376204213 · Twitter Post
• https://twitter.com/PurpleOps_io/status/1988547410004435138 · Twitter Post
• https://twitter.com/Art_Capella/status/1988592085738656171 · Twitter Post
• https://twitter.com/Trej0Jass/status/1988611231402573902 · Twitter Post
• https://twitter.com/threatcluster/status/1992639330314076500 · Twitter Post
• https://twitter.com/zeeshankghouri/status/1988545086578372767 · Twitter Post
• https://twitter.com/catnap707/status/1988358008473350211 · Twitter Post