CVE-2025-53717

Published: Oct 14, 2025Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Affected (4)

Products: Microsoft: Windows 11 22h2, Windows 11 23h2, Windows 11 24h2, Windows 11 25h2

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 11 22h2	Before 10.0.22621.6060
Microsoft Windows 11 23h2	Up to 10.0.22631.6060
Microsoft Windows 11 24h2	Before 10.0.26100.6899
Microsoft Windows 11 25h2	Before 10.0.26200.6899

Related CWEs

CWE-807

Reliance on Untrusted Inputs in a Security Decision

The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53717

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.