Product:
Graphics Kernel
Summary
A time-of-check time-of-use race condition in the Graphics Kernel allows an authorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers with low privileges can exploit this issue, making it a serious concern for affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2025-55236 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and be able to interact with the Graphics Kernel. By manipulating the timing of operations, the attacker can execute arbitrary code, potentially leading to unauthorized access or control over the system. User interaction is required, which may involve tricking the user into performing specific actions that trigger the race condition.
Affected Products
- Graphics Kernel: Vulnerable to local code execution due to a race condition.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. It is also recommended to limit local access to systems and educate users about the risks of executing untrusted code. Regularly monitoring and auditing system access can help identify potential exploitation attempts.