{"id":"CVE-2025-50168","published":"2025-08-12T17:10:05Z","modified":"2026-02-26T17:49:17Z","title":"Win32k Elevation of Privilege Vulnerability","vendor":"Microsoft","product":"Windows 11 version 22H2","tier":"tail","description":{"text":"Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00776,"percentile":0.55652,"provenance":"source"},"cwes":[{"id":"CWE-843","name":"Access of Resource Using Incompatible Type"},{"id":"CWE-122","name":"Heap-based Buffer Overflow"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50168","tags":["vendor-advisory","patch"]}],"priority":{"score":21.6,"factors":[{"name":"EPSS percentile","points":11.13},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":5.46}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-11-01","earliestUrl":"https://github.com/D4m0n/CVE-2025-50168-pwn2own-berlin-2025","repos":[{"name":"D4m0n/CVE-2025-50168-pwn2own-berlin-2025","url":"https://github.com/D4m0n/CVE-2025-50168-pwn2own-berlin-2025","stars":147,"created":"2025-11-01"}]},"first":{"date":"2025-11-01","source":"PoC-in-GitHub","url":"https://github.com/D4m0n/CVE-2025-50168-pwn2own-berlin-2025"},"provenance":"source"},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Windows 11 version 22H2","versions":[">= 10.0.22621.0, < 10.0.22621.5768"]},{"vendor":"Microsoft","product":"Windows 11 version 22H3","versions":[">= 10.0.22631.0, < 10.0.22631.5768"]},{"vendor":"Microsoft","product":"Windows 11 Version 23H2","versions":[">= 10.0.22631.0, < 10.0.22631.5768"]},{"vendor":"Microsoft","product":"Windows 11 Version 24H2","versions":[">= 10.0.26100.0, < 10.0.26100.4946"]},{"vendor":"Microsoft","product":"Windows Server 2022, 23H2 Edition (Server Core installation)","versions":[">= 10.0.25398.0, < 10.0.25398.1791"]},{"vendor":"Microsoft","product":"Windows Server 2025","versions":[">= 10.0.26100.0, < 10.0.26100.4946"]},{"vendor":"Microsoft","product":"Windows Server 2025 (Server Core installation)","versions":[">= 10.0.26100.0, < 10.0.26100.4946"]}],"euvd":{"id":"EUVD-2025-24343","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-microsoft-windows-cwe-843"}}