CVE Database · CVE-2025-54913
CVSS v3.1
7.8
EPSS
0.27%
Published
Sep 9, 2025
Modified
Oct 2, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (16)
References (1)