Microsoft Windows Server 2025
Moderate fix1 remedy
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*
Moderate fix1 remedy
Microsoft Windows ReFS Deduplication Service Elevation of Privilege Vulnerability
Vulnerability
Patched
An elevation of privilege vulnerability has been identified in the Windows Resilient File System (ReFS) Deduplication Service. This vulnerability allows an attacker to gain SYSTEM privileges by exploiting a race condition. It affects multiple Windows 11 versions and Windows Server 2025, including Server Core installations.
Impact
Successful exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain SYSTEM rights.
Remediation
Users can apply the security update KB5066835 to address this vulnerability. This update is available through the Microsoft Update Catalog.
Added: Oct 14, 2025, 6:41 PM
Updated: Oct 14, 2025, 9:13 PM
Vulnerability Rating
Custom Algorithm
spread
8.4impact
7.5exploitability
4.3remediation
7.7relevance
0.7threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.