Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
Security updates
10.0.17763.7314 — https://support.microsoft.com/help/5058392
10.0.20348.3692 — https://support.microsoft.com/help/5058385
10.0.20348.3630 — https://support.microsoft.com/help/5058500
10.0.19044.5854 — https://support.microsoft.com/help/5058379
10.0.22621.5335 — https://support.microsoft.com/help/5058405
10.0.26100.4061 — https://support.microsoft.com/help/5058411
10.0.26100.3981 — https://support.microsoft.com/help/5058497
10.0.25398.1611 — https://support.microsoft.com/help/5058384
10.0.10240.21014 — https://support.microsoft.com/help/5058387
10.0.14393.8066 — https://support.microsoft.com/help/5058383
6.0.6003.23317 — https://support.microsoft.com/help/5061198
6.0.6003.23279 — https://support.microsoft.com/help/5058429
6.1.7601.27729 — https://support.microsoft.com/help/5058430
6.1.7601.27729 — https://support.microsoft.com/help/5058454
6.2.9200.25475 — https://support.microsoft.com/help/5058451
6.3.9600.22577 — https://support.microsoft.com/help/5058403
Vulnerabilities 1
-
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published. This CVE was addressed by updates that were released in May 2025, but the CVE was inadvertently omitted from the May 2025 Security Updates. This is an informational change only. Customers who have already installed the May 2025 updates do not need to take any further action.
References
-
CVE-2025-47955 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47955
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss