PT-2025-36889

CVE-2025-55228

Published

2025-09-09

Updated

2025-09-10

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX (affected versions not specified)

Description: The issue involves concurrent execution using a shared resource with improper synchronization, specifically a race condition within Windows Win32K - GRFX. This allows an authorized attacker to execute code locally. The vulnerability also allows remote attackers to execute arbitrary code and affect the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

B2Ahex

Cyanbamboo

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

Related identifiers

CVE-2025-55228