IT

Tracker / CVE-2025-26649

CVE-2025-26649

High 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

Affected products and versions

microsoft windows_11_22h2 · … → 10.0.22621.5189
microsoft windows_11_23h2 · … → 10.0.22631.5189
microsoft windows_11_24h2 · … → 10.0.26100.3775
microsoft windows_server_2022 · … → 10.0.20348.3453
microsoft windows_server_2022_23h2 · … → 10.0.25398.1551
microsoft windows_server_2025 · … → 10.0.26100.3775

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References