Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2025-59195: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in Microsoft Windows 10 Version 1809

0
High
VulnerabilityCVE-2025-59195cvecve-2025-59195cwe-362cwe-416
Published: Tue Oct 14 2025 (10/14/2025, 17:00:29 UTC)
Source: CVE Database V5
Vendor/Project: Microsoft
Product: Windows 10 Version 1809

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 02/22/2026, 21:10:01 UTC

Technical Analysis

CVE-2025-59195 is a race condition vulnerability classified under CWE-362 affecting the Microsoft Graphics Component in Windows 10 Version 1809 (build 10.0.17763.0). The flaw arises from improper synchronization when multiple threads concurrently access shared resources within the graphics subsystem, leading to unpredictable behavior. This can cause denial of service conditions such as system crashes or hangs. The vulnerability requires an attacker to have local access with low privileges but does not require user interaction, making exploitation feasible in environments where an attacker can execute code locally. The CVSS v3.1 base score is 7.0, reflecting high severity due to the impact on confidentiality, integrity, and availability, combined with the complexity of attack requiring local access and high attack complexity. No known exploits have been reported in the wild, and no official patches have been released at the time of publication. The vulnerability could be leveraged to disrupt critical services or cause system instability, particularly in environments relying heavily on Windows 10 Version 1809 for graphics processing tasks.

Potential Impact

The primary impact of this vulnerability is denial of service through system instability or crashes caused by race conditions in the graphics component. This can disrupt business operations, especially in environments where Windows 10 Version 1809 is used for critical applications involving graphics rendering or processing. The vulnerability affects confidentiality and integrity indirectly by potentially causing system crashes that may interrupt security controls or logging mechanisms. Organizations with multiple users on shared systems or those allowing local access to untrusted users are at increased risk. The inability to exploit remotely limits the scope but does not eliminate risk in environments with local threat actors or compromised user accounts. The lack of known exploits in the wild provides a window for proactive mitigation before active exploitation occurs.

Mitigation Recommendations

1. Monitor Microsoft security advisories closely and apply patches immediately once available to address this vulnerability. 2. Restrict local access to systems running Windows 10 Version 1809, especially for untrusted or low-privilege users, to reduce the risk of local exploitation. 3. Employ application whitelisting and endpoint protection to prevent unauthorized code execution locally. 4. Use system and security monitoring tools to detect abnormal behavior or crashes related to the graphics component. 5. Consider upgrading affected systems to a more recent, supported Windows version where this vulnerability is not present. 6. Implement strict user privilege management to minimize the number of users with local access rights. 7. In environments where graphics processing is critical, isolate such systems and limit exposure to potential local attackers. 8. Conduct regular system integrity checks and maintain backups to enable rapid recovery from denial of service incidents.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.1
Assigner Short Name
microsoft
Date Reserved
2025-09-10T23:00:43.463Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 68ee858a3dd1bfb0b7e4054c

Added to database: 10/14/2025, 5:16:58 PM

Last enriched: 2/22/2026, 9:10:01 PM

Last updated: 3/24/2026, 5:41:06 PM

Views: 87

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses