All vulnerabilities
CVE-2025-62215

Microsoft Windows Race Condition Vulnerability

Microsoft WindowsOperating systems
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationExploited in the wildAdded to KEV 12 Nov 2025CISA KEV
Exploit odds (EPSS)4.46%Chance of exploitation activity in the next 30 days, higher than 91% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in10.0.17763.8027Also 10.0.19044.6575, 10.0.19045.6575 and 5 moreCVE List
Federal deadline3 Dec 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 10.0.17763.8027Windows 10 Version 1809CVE List
  • 10.0.19044.6575Windows 10 Version 21H2CVE List
  • 10.0.19045.6575Windows 10 Version 22H2CVE List
  • 10.0.22631.6199Windows 11 version 22H3CVE List
  • 10.0.22631.6199Windows 11 Version 23H2CVE List
  • 10.0.26100.7171Windows 11 Version 24H2CVE List
Show all 13 fixed versions
  • 10.0.26200.7171Windows 11 Version 25H2CVE List
  • 10.0.17763.8027Windows Server 2019CVE List
  • 10.0.17763.8027Windows Server 2019 (Server Core installation)CVE List
  • 10.0.20348.4405Windows Server 2022CVE List
  • 10.0.25398.1965Windows Server 2022, 23H2 Edition (Server Core installation)CVE List
  • 10.0.26100.7171Windows Server 2025CVE List
  • 10.0.26100.7171Windows Server 2025 (Server Core installation)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 11 Nov 2025, 17:59 UTCPublishedCVE List
  2. 12 Nov 2025Added to CISA KEVCISA KEV
  3. 6 Apr 2026Exploit code publicExploit-DB

Public exploit code and templates 1

  • Local exploitWindows Kernel - Elevation of Privilege 6 Apr 2026Exploit-DB

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.

Text from CVE List

Affected versions 13

  • Windows 10 Version 1809affected: 10.0.17763.0 before 10.0.17763.8027CVE List
  • Windows 10 Version 21H2affected: 10.0.19044.0 before 10.0.19044.6575CVE List
  • Windows 10 Version 22H2affected: 10.0.19045.0 before 10.0.19045.6575CVE List
  • Windows 11 version 22H3affected: 10.0.22631.0 before 10.0.22631.6199CVE List
  • Windows 11 Version 23H2affected: 10.0.22631.0 before 10.0.22631.6199CVE List
  • Windows 11 Version 24H2affected: 10.0.26100.0 before 10.0.26100.7171CVE List
  • Windows 11 Version 25H2affected: 10.0.26200.0 before 10.0.26200.7171CVE List
  • Windows Server 2019affected: 10.0.17763.0 before 10.0.17763.8027CVE List
  • Windows Server 2019 (Server Core installation)affected: 10.0.17763.0 before 10.0.17763.8027CVE List
  • Windows Server 2022affected: 10.0.20348.0 before 10.0.20348.4405CVE List
  • Windows Server 2022, 23H2 Edition (Server Core installation)affected: 10.0.25398.0 before 10.0.25398.1965CVE List
  • Windows Server 2025affected: 10.0.26100.0 before 10.0.26100.7171CVE List
  • Windows Server 2025 (Server Core installation)affected: 10.0.26100.0 before 10.0.26100.7171CVE List

References 4