CVE-2025-49690

High CVSS: 7.4

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.

Vendor

Microsoft

Product

Windows 10 1809

CWE

CWE-362

Yayın Tarihi

2025-07-08 17:15:54

Güncelleme

2025-07-15 17:31:11

Source Identifier

secure@microsoft.com

KEV Date Added

Kategoriler

CWE-362 Windows 10 1809 HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49690

Benzer Kayıtlar

Critical

CVE-2026-33107

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a netw…

Critical

CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…

Critical

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Critical

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information…

High

CVE-2026-32173

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Critical

CVE-2026-26135

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to ele…