CVE-2025-47962 Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally

Description

Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Windows SDK 10.0	earliest → < 10.0.26100.4188	10.0.26100.4188

Other CVEs of Windows SDK

The 2 CVEs of Windows SDK →

CVE-2026-21219 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally 7.0 High