CVE-2025-53721

EUVD-2025-24308
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1809
𝑥
< 10.0.17763.7678
microsoftwindows_10_1809
𝑥
< 10.0.17763.7678
microsoftwindows_10_21h2
𝑥
< 10.0.19044.6216
microsoftwindows_10_22h2
𝑥
< 10.0.19045.6216
microsoftwindows_11_22h2
𝑥
< 10.0.22621.5768
microsoftwindows_11_23h2
𝑥
< 10.0.22631.5768
microsoftwindows_11_24h2
𝑥
< 10.0.26100.4851
microsoftwindows_server_2019
𝑥
< 10.0.17763.7678
microsoftwindows_server_2022
𝑥
< 10.0.20348.3989
microsoftwindows_server_2022_23h2
𝑥
< 10.0.25398.1791
microsoftwindows_server_2025
𝑥
< 10.0.26100.4851
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1809 (x64, x86)
KB5063877
21H2 (arm64, x64, x86)
KB5063709
22H2 (arm64, x64, x86)
KB5063709
Windows 11
22H2 (arm64, x64)
KB5063875
23H2 (arm64, x64)
KB5063875
24H2 (arm64, x64)
KB5063878
Windows Server 2019
Server Core
KB5063877
Standard
KB5063877
Windows Server 2022
23H2 Server Core
KB5063899
Server Core
KB5063880
Standard
KB5063880
Windows Server 2025
Server Core
KB5063878
Standard
KB5063878
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53721