CVE-2025-62472

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-62472

CVE-2025-62472 affects Windows Remote Access Connection Manager. The issue is described as an elevation of privilege vulnerability caused by use of an uninitialized resource, allowing an authorized local attacker to gain higher privileges. Microsoft’s December 2025 updates (e.g., KB5071501/KB5071...