You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 55331
About this tag
CVE-2025-55331 is a high-severity use-after-free (UAF) vulnerability in the Windows PrintWorkflowUserSvc service that allows an authenticated local attacker to escalate privileges to SYSTEM. Microsoft addressed the flaw during the October 14, 2025 Patch Tuesday cycle, assigning it a CVSS v3.1 base score of 7.0. The vulnerability affects modern per-user print workflows and advanced print processing. Defenders should identify the correct KB/build mappings and apply updates promptly to mitigate the risk of local privilege escalation.
A critical Linux-kernel fix for LoongArch KVM addresses a scheduling-in-atomic-context bug that can crash or render a host unavailable: CVE-2024-53089 patches KVM timer handling so that high-resolution timers (hrtimers) used by the LoongArch KVM backend are allowed to expire in hard interrupt...
Microsoft’s security tracking page and multiple independent vulnerability databases have labeled CVE-2025-55331 as a use‑after‑free (UAF) flaw in the Windows PrintWorkflowUserSvc that can be abused by an authenticated local user to gain SYSTEM privileges; the flaw carries a High severity rating...
Microsoft’s security tracking shows CVE-2025-55331 as a use‑after‑free (UAF) elevation‑of‑privilege flaw in the Windows PrintWorkflowUserSvc that can let an authorized local user escalate to SYSTEM under the right conditions — Microsoft assigned the issue a High CVSS v3.1 base score (7.0) and...