A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2025-59230

Microsoft Windows Improper Access Control Vulnerability

Published
2025-10-14
Modified
2026-07-31
Sources
cisa-kev

Summary

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.