CVE-2025-62472: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Other sources
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25815Patch KB5071505 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.28064Patch KB5071506 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22920Patch KB5071503 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.23666Patch KB5071507 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.8688Patch KB5071543 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.7462Fixed in 10.0.26100.7392Patch KB5072014 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.2025Patch KB5071542 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.6345Patch KB5071417 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.7462Fixed in 10.0.26200.7392Patch KB5072014 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.6691Patch KB5071546 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.6691Patch KB5071546 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.4529Fixed in 10.0.20348.4467Patch KB5071413 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.8146Patch KB5071544
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62472?
CVE-2025-62472 has a high severity rating due to its potential for local privilege escalation.
How do I fix CVE-2025-62472?
To fix CVE-2025-62472, apply the relevant security patches provided by Microsoft for your affected operating system.
What products are affected by CVE-2025-62472?
CVE-2025-62472 affects multiple Microsoft products, including Windows Server 2012, Windows Server 2008 R2, and various versions of Windows 10 and Windows 11.
Can CVE-2025-62472 be exploited remotely?
CVE-2025-62472 requires local access to the system for exploitation, making it a local privilege escalation vulnerability.
Is there a workaround for CVE-2025-62472?
Currently, the best response to CVE-2025-62472 is to apply the available security updates from Microsoft rather than relying on a workaround.