Lucene search
K

Windows StateRepository API Server file Elevation of Privilege Vulnerability

🗓️ 12 Aug 2025 07:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 2 Views

Windows StateRepo API local elev.; missing auth on critical function enables authorized attacker.

Related
Detection
Vulners
Node
microsoftwindows_11_23h2Range<10.0.22631.5624x64
OR
microsoftwindows_server_2025Range<10.0.26100.4652
OR
microsoftwindows_10_22h2Range<10.0.19044.6093x86
OR
microsoftwindows_10_22h2Range<10.0.19044.6093x64
OR
microsoftwindows_10_1607Range<10.0.14393.8246x64
OR
microsoftwindows_10_1607Range<10.0.14393.8246x86
OR
microsoftwindows_10_1507Range<10.0.10240.21073x64
OR
microsoftwindows_10_1507Range<10.0.10240.21073x86
OR
microsoftwindows_server_2025Range<10.0.26100.4652
OR
microsoftwindows_11_24h2Range<10.0.26100.4652x64
OR
microsoftwindows_11_24h2Range<10.0.26100.4652x64
OR
microsoftwindows_server_23h2Range<10.0.25398.1732
OR
microsoftwindows_11_23h2Range<10.0.22621.5624x64
OR
microsoftwindows_server_2016Range<10.0.14393.8246
OR
microsoftwindows_server_2016Range<10.0.14393.8246
OR
microsoftwindows_10_22h2Range<10.0.19044.6093x64
OR
microsoftwindows_11_22h2Range<10.0.22621.5624x64
OR
microsoftwindows_11_22h2Range<10.0.22631.5624x64
OR
microsoftwindows_10_21h2Range<10.0.19044.6093x64
OR
microsoftwindows_10_21h2Range<10.0.19044.6093x64
OR
microsoftwindows_10_21h2Range<10.0.19044.6093x86
OR
microsoftwindows_server_2022Range<10.0.20348.3932
OR
microsoftwindows_server_2022Range<10.0.20348.3932
OR
microsoftwindows_server_2019Range<10.0.17763.7558
OR
microsoftwindows_server_2019Range<10.0.17763.7558
OR
microsoftwindows_10_1809Range<10.0.17763.7558x64
OR
microsoftwindows_10_1809Range<10.0.17763.7558x86

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Aug 2025 07:00Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.8
EPSS0.00318
SSVC
2