VULNERABILITY INTELLIGENCE

CVE-2025-27492

CVSS score7 HIGH

EPSS probability0.35%

CISA KEVNot currently listed

Published2025-04-08

Last modified2026-06-17

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.