CVE-2025-24076
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Security Summary
CVE-2025-24076 is an improper access control vulnerability in the Windows Cross Device Service that allows an authorized attacker to elevate privileges locally. Published on 2025-03-11, it carries a CVSS v3.1 base score of 7.3 (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) and maps to CWE-284: Improper Access Control.
A local attacker with low privileges (PR:L) can exploit this vulnerability with low attack complexity (AC:L) but requires user interaction (UI:R), such as tricking the user into performing a specific action. Successful exploitation enables privilege escalation without changing scope (S:U), resulting in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H).
The Microsoft Security Response Center provides an update guide for this vulnerability at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24076, which details patches and mitigation recommendations.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a local privilege escalation vulnerability via improper access control in a Windows service, directly mapping to exploitation for privilege escalation.