CVE-2025-62215

ENISA EUVD: EUVD-2025-93397 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 4 articles Published: 2025-11-11

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23

2.37%

probability

This CVE has a 2.37% probability of being exploited in the next 30 days.

0% Top 85.2th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

HIGH

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Temporal

Exploit Code Maturity

Functional

Remediation Level

Official Fix

Report Confidence

Confirmed

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Description

NVD

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected Products

Microsoft

Windows 10 Version 1809

10.0.17763.0

Microsoft

Windows 10 Version 21H2

10.0.19044.0

Microsoft

Windows 10 Version 22H2

10.0.19045.0

Microsoft

Windows 11 version 22H3

10.0.22631.0

Microsoft

Windows 11 Version 23H2

10.0.22631.0

microsoft

windows 10 1809

microsoft

windows 10 21h2

microsoft

windows 10 22h2

microsoft

windows 11 23h2

microsoft

windows 11 24h2

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0 <10.0.17763.8027

Microsoft

Windows Server 2025

10.0.26100.0 <10.0.26100.7171

Microsoft

Windows 11 Version 25H2

10.0.26200.0 <10.0.26200.7171

Microsoft

Windows 10 Version 22H2

10.0.19045.0 <10.0.19045.6575

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

10.0.25398.0 <10.0.25398.1965

Microsoft

Windows 11 version 22H3

10.0.22631.0 <10.0.22631.6199

Microsoft

Windows 11 Version 24H2

10.0.26100.0 <10.0.26100.7171

Microsoft

Windows Server 2025 (Server Core installation)

10.0.26100.0 <10.0.26100.7171

Microsoft

Windows 10 Version 1809

10.0.17763.0 <10.0.17763.8027

Microsoft

Windows Server 2022

10.0.20348.0 <10.0.20348.4405

Microsoft

Windows 11 Version 23H2

10.0.22631.0 <10.0.22631.6199

Microsoft

Windows 10 Version 21H2

10.0.19044.0 <10.0.19044.6575

Microsoft

Windows Server 2019

10.0.17763.0 <10.0.17763.8027

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-1341 · Multiple Releases of Same Resource or Handle CWE-362 · Race Condition CWE-415 · Double Free CWE-573 · Improper Following of Specification by Caller CWE-664 · Improper Control of a Resource Through its Lifetime CWE-666 · Operation on Resource in Wrong Phase of Lifetime CWE-672 · Operation on a Resource after Expiration or Release CWE-675 · Multiple Operations on Resource in Single-Operation Context CWE-691 · Insufficient Control Flow Management CWE-710 · Improper Adherence to Coding Standards CWE-825 · Expired Pointer Dereference

Google Project Zero

Patched

Nov. 11, 2025

Reported by

Microsoft Threat Intelligence Center (MSTIC) & Microsoft Security Response Center (MSRC)

Root Cause Analysis

???

Exploits & PoC

dexterm300/CVE-2025-62215-exploit-poc

CVE-2025-62215 is an Elevation of Privilege (EoP) vulnerability in the Windows Kernel, disclosed in November 2025 and confirmed to be actively exploit

32 2025-11-14

abrewer251/CVE-2025-62215_Windows_Kernel_PE

This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. Th

9 2025-11-18

gowonisgood/CVE-2025-62215-POC

9 2026-05-21

mrk336/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scr

4 2025-11-18

theman001/CVE-2025-62215

CVE-2025-62215: Windows Kernel Race Condition + Double-Free EoP

2 2025-12-23

uky007/CVE-2025-62215_analysis

CVE-2025-62215 exploit development using Claude Code Agent Team

0 2026-02-11

6 repos — triés par ⭐ Rechercher sur GitHub ↗

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215

vendor-advisory patch

Signal Intelligence

Confidenceⓘ

92%

EPSS 2.37%

CVSS v3.1 7

Mentions 4

Last Seen Nov 13, 2025

CNA Information

CNA Assigner

microsoft

CNA Title

Windows Kernel Elevation of Privilege Vulnerability

Analyst Note

This CVE is confirmed as a zero-day under active exploitation, with coverage from reputable cybersecurity news sources (TheHackerNews, BleepingComputer) documenting Microsoft's November 2025 patch deployment. The HIGH CVSS score (7.0) combined with active attack evidence and inclusion in Google Project Zero substantiates the confirmed status, though non-inclusion in CISA KEV slightly tempers absolute certainty.