CVE-2025-62217

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7 HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
microsoftwindows_10_1607
𝑥
< 10.0.14393.8594
microsoftwindows_10_1607
𝑥
< 10.0.14393.8594
microsoftwindows_10_1809
𝑥
< 10.0.17763.8027
microsoftwindows_10_1809
𝑥
< 10.0.17763.8027
microsoftwindows_10_21h2
𝑥
< 10.0.19044.6575
microsoftwindows_10_22h2
𝑥
< 10.0.19045.6575
microsoftwindows_11_23h2
𝑥
< 10.0.22631.6199
microsoftwindows_11_24h2
𝑥
< 10.0.26100.7092
microsoftwindows_11_25h2
𝑥
< 10.0.26200.7092
microsoftwindows_server_2008
-
microsoftwindows_server_2008
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
𝑥
< 10.0.14393.8594
microsoftwindows_server_2019
𝑥
< 10.0.17763.8027
microsoftwindows_server_2022
𝑥
< 10.0.20348.4346
microsoftwindows_server_2022_23h2
𝑥
< 10.0.25398.1965
microsoftwindows_server_2025
𝑥
< 10.0.26100.7092
𝑥
= Vulnerable software versions