Cyber Resilience

CVE-2025-62462

Memory Safety in Microsoft Windows 10 1809 ≤ 10.0.17763.8146

Published
09 December 2025
Modified
10 December 2025
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0038 30th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2025-62462 is a high-severity Buffer Over-read (CWE-126) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 30th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SI-16 (Memory Protection) and SI-2 (Flaw Remediation) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Buffer over-read in Windows Projected File System enables local privilege escalation, directly mapping to T1068 (Exploitation for Privilege Escalation).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-62464Same product: Microsoft Windows 10 1809
CVE-2025-62461Same product: Microsoft Windows 10 1809
CVE-2026-26184Same product: Microsoft Windows 10 1809
CVE-2025-62467Same product: Microsoft Windows 10 1809
CVE-2025-60720Same product: Microsoft Windows 10 1809
CVE-2025-21271Same product: Microsoft Windows 10 1809
CVE-2026-50435Same product: Microsoft Windows 10 1809
CVE-2026-50402Same product: Microsoft Windows 10 1809
CVE-2026-50372Same product: Microsoft Windows 10 1809
CVE-2026-42828Same product: Microsoft Windows 10 1809

Affected Assets

microsoft
windows 10 1809
≤ 10.0.17763.8146 · ≤ 10.0.17763.8146
microsoft
windows 10 21h2
≤ 10.0.19044.6691
microsoft
windows 10 22h2
≤ 10.0.19045.6691
microsoft
windows 11 23h2
≤ 10.0.22631.6345
microsoft
windows 11 24h2
≤ 10.0.26100.7392
microsoft
windows 11 25h2
≤ 10.0.26200.7392
microsoft
windows server 2019
≤ 10.0.17763.8146
microsoft
windows server 2022
≤ 10.0.20348.4467
microsoft
windows server 2022 23h2
≤ 10.0.25398.2025
microsoft
windows server 2025
≤ 10.0.26100.7392

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-16 Memory Protection
  • SI-2 Flaw Remediation
  • SI-10 Information Input Validation
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly implements memory safety mechanisms that block buffer over-read exploitation in components such as ProjFS.

prevent

Requires prompt application of vendor patches that eliminate the buffer over-read flaw in Windows Projected File System.

prevent

Enforces input validation on file-system metadata and data streams, reducing the likelihood of out-of-bounds reads.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure development practices directly prevent introduction of buffer over-read weaknesses.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover buffer over-read flaws via scanning or review.

PR.PS-02 partial match
prevents

Patching or replacing vulnerable software removes known instances of buffer over-read bugs.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development can detect buffer over-reads before release.

prevents

Secure SDLC mandates input validation and bounds checking that can prevent buffer over-reads.

prevents

Application security requirements can specify buffer-size and bounds-checking rules.

prevents

Secure architecture principles include memory-safety and bounds-checking design choices.

prevents

Secure coding standards directly require bounds-checked buffer access, mitigating over-reads.

References