Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Windows SDK allows local privilege escalation for authorized users

CVE-2025-47962 · published 1 year ago
Summary

A security issue in the Windows Software Development Kit (SDK) could allow a user with authorized access to gain more privileges on a Windows system than they are supposed to have. This could potentially allow them to make changes to the system or access data that they shouldn't be able to. To protect your system, ensure you update the Windows SDK to the latest version.

What to do
  • Update microsoft windows_software_development_kit to version 10.0.26100.4188 or later.
Affected software
VendorProductAffected versions
microsoft windows_software_development_kit < 10.0.26100.4188
cpe:2.3:a:microsoft:windows_software_development_kit:*:*:*:*:*:*:*:*
Original advisory text
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published10 Jun 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-47962 · NVD
Track software like this
Free during beta