Skip to content
OpenAdvisories
High MSRC-CVE-2025-55231 1 CVE

Windows Storage-based Management Service Remote Code Execution Vulnerability

Published Aug 12, 2025 · Updated Aug 26, 2025 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit the vulnerability?
An unauthenticated attacker could exploit the vulnerability by sending a malicious http request to the web server. A user would then have to restart the compromised service on the server to trigger the vulnerability.

Security updates
10.0.17763.7558 — https://support.microsoft.com/help/5062557
10.0.20348.3932 — https://support.microsoft.com/help/5062572
10.0.26100.4652 — https://support.microsoft.com/help/5062553
10.0.14393.8246 — https://support.microsoft.com/help/5062560
6.3.9600.22676 — https://support.microsoft.com/help/5062597

Vulnerabilities 1

Revision history

  1. #2

    Corrected Download and Article links in the Security Updates table. This is an informational change only.

  2. #1

    Information published. This CVE was addressed by updates that were released in July 2025, but the CVE was inadvertently omitted from the July 2025 Security Updates. This is an informational change only. Customers who have already installed the July 2025 updates do not need to take any further action.

References