Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2025, Microsoft Windows Server 2022, Microsoft Windows 11 und Microsoft Windows 10 ausnutzen, um seine Privilegien zu erhöhen.
Product
Windows ist ein Betriebssystem von Microsoft.
Vulnerabilities 3
-
High 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide CVE-2025-59215 vom 2025-09-18
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59215
-
Microsoft Security Update Guide CVE-2025-59216 vom 2025-09-18
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59216
-
Microsoft Security Update Guide CVE-2025-59220 vom 2025-09-18
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59220