Microsoft has published an advisory for CVE-2025-59196: a high‑severity elevation‑of‑privilege vulnerability in the Windows Simple Service Discovery Protocol (SSDP) Service that, according to public trackers, is caused by a race condition allowing an authorized local user to escalate privileges...
The Windows Simple Service Discovery Protocol (SSDP) Service has been identified with a critical vulnerability, designated as CVE-2025-47976. This flaw is a use-after-free issue that allows authorized attackers to elevate their privileges locally, potentially gaining SYSTEM-level access...