CVE-2025-59230
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
1/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Windows
Date Added
2025-10-14
Remediation Due
2025-11-04
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230 ; https://nvd.nist.gov/vuln/detail/CVE-2025-59230