CVE-2025-26634
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Security Summary
CVE-2025-26634 is a heap-based buffer overflow vulnerability, classified under CWE-122, affecting the Windows Core Messaging component. This flaw enables an authorized attacker to elevate privileges over a network, with a CVSS v3.1 base score of 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
An attacker with low privileges (PR:L) can exploit this vulnerability remotely over the network (AV:N), though it requires high attack complexity (AC:H) and no user interaction (UI:N). Successful exploitation grants high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H), specifically allowing privilege escalation within the affected system.
The Microsoft Security Response Center provides an update guide for this vulnerability at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26634, which details recommended mitigations and patches.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The heap-based buffer overflow in Windows Core Messaging directly enables remote privilege escalation from low privileges, matching T1068 Exploitation for Privilege Escalation.