CVE-2025-62472: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Other sources
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62472?
CVE-2025-62472 has a high severity rating due to its potential for local privilege escalation.
How do I fix CVE-2025-62472?
To fix CVE-2025-62472, apply the relevant security patches provided by Microsoft for your affected operating system.
What products are affected by CVE-2025-62472?
CVE-2025-62472 affects multiple Microsoft products, including Windows Server 2012, Windows Server 2008 R2, and various versions of Windows 10 and Windows 11.
Can CVE-2025-62472 be exploited remotely?
CVE-2025-62472 requires local access to the system for exploitation, making it a local privilege escalation vulnerability.
Is there a workaround for CVE-2025-62472?
Currently, the best response to CVE-2025-62472 is to apply the available security updates from Microsoft rather than relying on a workaround.