Description

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally.

INFO

Published Date :

2025-10-14T17:01:12.774Z

Last Modified :

2025-10-17T16:39:09.279Z

Source :

microsoft
AFFECTED PRODUCTS

The following products are affected by CVE-2025-55696 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-55696.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact