جزئیات آسیب‌پذیری

CVE-2025-24983

بهره‌برداری فعال

Microsoft Windows 10Microsoft Windows Server

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1

7.0بالا

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

امتیاز	نسخه	منبع	بردار
7.0بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Windows 10 Version 1507	10.0.10240.0 ≤ v < 10.0.10240.20947	CVEProject cvelistV5 (CNA)
Microsoft	Windows 10 Version 1607	10.0.14393.0 ≤ v < 10.0.14393.7876	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0 ≤ v < 6.1.7601.27618	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	6.1.7601.0 ≤ v < 6.1.7601.27618	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 ≤ v < 6.0.6003.23168	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	6.0.6003.0 ≤ v < 6.0.6003.23168	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012	6.2.9200.0 ≤ v < 6.2.9200.25368	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 ≤ v < 6.2.9200.25368	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 R2	6.3.9600.0 ≤ v < 6.3.9600.22470	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 ≤ v < 6.3.9600.22470	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2016	10.0.14393.0 ≤ v < 10.0.14393.7876	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 ≤ v < 10.0.14393.7876	CVEProject cvelistV5 (CNA)

۱٫۸۷٪

احتمال بهره‌برداری در ۳۰ روز

۷۹٫۳٪

صدک (نسبت به همه‌ی CVEها)