cve-2025-54093

CVE-2025-54093 is a time-of-check/time-of-use (TOCTOU) race condition in the Windows TCP/IP driver that Microsoft has identified as a local privilege escalation vulnerability. An authorized local user who can run code on the affected system may exploit this race condition to elevate their privileges. The flaw resides in the TCP/IP driver's handling of certain operations, where a race window allows an attacker to modify system state after a security check but before the operation is performed. Microsoft has released an advisory detailing the issue, and users are advised to apply the latest security updates to mitigate the risk. This tag covers discussions and analysis of the vulnerability, its impact, and remediation steps.