CVE-2025-24076 Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally

Description

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Windows 11 version 22H2 10.0	10.0.22621.0 → < 10.0.22621.5039	10.0.22621.5039
Windows Server 2025 (Server Core installation) 10.0	10.0.26100.0 → < 10.0.26100.3476	10.0.26100.3476
Windows 11 version 22H3 10.0	10.0.22631.0 → < 10.0.22631.5039	10.0.22631.5039
Windows 11 Version 23H2 10.0	10.0.22631.0 → < 10.0.22631.5039	10.0.22631.5039
Windows Server 2022, 23H2 Edition (Server Core installation) 10.0	10.0.25398.0 → < 10.0.25398.1486	10.0.25398.1486
Windows 11 Version 24H2 10.0	10.0.26100.0 → < 10.0.26100.3476	10.0.26100.3476
Windows Server 2025 10.0	10.0.26100.0 → < 10.0.26100.3476	10.0.26100.3476

Autres CVE de Windows 11 version 22H2

Les 1776 CVE de Windows 11 version 22H2 →

CVE-2026-50508 Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform… 6.5 Moyenne CVE-2025-64680 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 Élevée CVE-2025-64679 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 Élevée CVE-2025-62209 Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose… 5.5 Moyenne