vulnerability

Microsoft Windows: CVE-2025-47955: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Jun 10, 2025
Added
Jun 10, 2025
Modified
Sep 17, 2025

Description

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Solutions

microsoft-windows-windows_10-1507-kb5058387microsoft-windows-windows_10-1607-kb5058383microsoft-windows-windows_10-1809-kb5058392microsoft-windows-windows_10-21h2-kb5058379microsoft-windows-windows_10-22h2-kb5058379microsoft-windows-windows_11-22h2-kb5058405microsoft-windows-windows_11-23h2-kb5058405microsoft-windows-windows_11-24h2-kb5058411microsoft-windows-windows_server_2012-kb5058451microsoft-windows-windows_server_2012_r2-kb5058403microsoft-windows-windows_server_2016-1607-kb5058383microsoft-windows-windows_server_2019-1809-kb5058392microsoft-windows-windows_server_2022-21h2-kb5058385microsoft-windows-windows_server_2022-22h2-kb5058385microsoft-windows-windows_server_2022-23h2-kb5058384microsoft-windows-windows_server_2025-24h2-kb5058411

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.