CVE-2025-49679

High

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-197·Published 2025-07-08

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

102 chars

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

NVDen

102 chars

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

NVDes

115 chars

Un error de truncamiento numérico en Windows Shell permite que un atacante autorizado eleve privilegios localmente.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9