Product:
Windows Subsystem for Linux GUI
Summary
Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw to gain unauthorized access and execute arbitrary code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-62220 |
Exploitation
To exploit this vulnerability, an attacker must have network access and can leverage the buffer overflow to execute malicious code. The attack requires user interaction, making it necessary for the victim to perform an action that triggers the overflow. Once executed, the attacker can gain control over the affected system.
Affected Products
- Windows Subsystem for Linux GUI: A feature that allows users to run Linux GUI applications on Windows.
Mitigation
To mitigate this vulnerability, users should ensure that they apply the latest security updates provided by Microsoft. Additionally, implementing network security measures to limit unauthorized access can help reduce the risk of exploitation. Users should also be cautious about executing untrusted applications.