CVE-2025-53134

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
microsoftwindows_10_1507
𝑥
< 10.0.10240.21100
microsoftwindows_10_1507
𝑥
< 10.0.10240.21100
microsoftwindows_10_1607
𝑥
< 10.0.14393.8330
microsoftwindows_10_1607
𝑥
< 10.0.14393.8330
microsoftwindows_10_1809
𝑥
< 10.0.17763.7678
microsoftwindows_10_1809
𝑥
< 10.0.17763.7678
microsoftwindows_10_21h2
𝑥
< 10.0.19044.6216
microsoftwindows_10_22h2
𝑥
< 10.0.19045.6216
microsoftwindows_11_22h2
𝑥
< 10.0.22621.5768
microsoftwindows_11_23h2
𝑥
< 10.0.22631.5768
microsoftwindows_11_24h2
𝑥
< 10.0.26100.4851
microsoftwindows_server_2008
-
microsoftwindows_server_2008
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
𝑥
< 10.0.14393.8330
microsoftwindows_server_2019
𝑥
< 10.0.17763.7678
microsoftwindows_server_2022
𝑥
< 10.0.20348.3989
microsoftwindows_server_2022_23h2
𝑥
< 10.0.25398.1791
microsoftwindows_server_2025
𝑥
< 10.0.26100.4851
𝑥
= Vulnerable software versions