VDB

CISA-2025-55697

CISA-2025-55697 PUBLISHED CVSS 7.8 HIGH

Reported by microsoft · Published October 14, 2025

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0
MicrosoftWindows Server 202510.0.26100.0
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0
MicrosoftWindows Server 2025 (Server Core installation)10.0.26100.0, 10.0.26100.0
microsoftwindows_server_23h210.0.25398.0, 10.0.25398.0
microsoftwindows_server_202510.0.26100.0, 10.0.26100.0, 10.0.26100.0
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0, 10.0.25398.0
MicrosoftWindows Server 202510.0.26100.0, 10.0.26100.0

Timeline

  • Oct 14, 2025 CVE Published
  • Feb 26, 2026 CVE Updated
  • Apr 26, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›