CVE-2025-62455
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access can elevate their privileges on the system. This may lead to system takeover.
Recommendation
Apply security updates provided by Microsoft. Restrict local access to the system.
Other vulnerabilities in Windows Message Queuing
See all- CVE-2026-34329High
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-33838High
CVE-2026-33838 is a vulnerability related to double free in Windows Message Queuing, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-69579Critical
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-50447Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-83997High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-72932High
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69645High
Use-after-free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-68887High
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
- CVE-2026-65790High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62719High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS