Microsoft Windows Improper Access Control Vulnerability
Microsoft · Windows
Date added (CISA)
2025-10-14
Remediation due
2025-11-04
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.