Privilege Escalation Flaw Found in Windows Remote Access Connection Manager

Microsoft disclosed two elevation-of-privilege vulnerabilities affecting the Windows Remote Access Connection Manager component on December 9, 2025.

Both flaws carry an Important severity rating and could allow authenticated local attackers to escalate privileges on vulnerable systems.

The vulnerabilities stem from distinct technical weaknesses in the Remote Access Connection Manager component.

CVE-2025-62474 results from improper access controls that allow attackers to bypass security restrictions and elevate their privileges on affected systems.

CVE-2025-62472, meanwhile, originates from two distinct memory-management flaws involving uninitialized resources and use-after-free conditions that could similarly lead to privilege escalation.

CVE ID	Affected Component	Vulnerability Type	Severity Rating	CVSS v3.1 Score
CVE-2025-62474	Windows Remote Access Connection Manager	Elevation of Privilege	Important	7.8
CVE-2025-62472	Windows Remote Access Connection Manager	Elevation of Privilege	Important	7.8

Both vulnerabilities have identical CVSS v3.1 base scores of 7.8, indicating high impact. The attack vector is local and low-complexity, requiring only minimal user privileges to exploit.

Critically, neither flaw requires victim interaction to succeed, meaning attackers can execute them autonomously once they gain initial local access.

Attack Requirements and Impact

Exploitation requires authenticated local access to affected systems. However, attackers with basic technical skills could develop functional exploits given the low attack complexity rating.

Successful exploitation would result in privilege escalation, potentially enabling complete system compromise and unauthorized access to sensitive resources.

Organizations operating Windows environments should prioritize patching these vulnerabilities across their infrastructure.

IT administrators must monitor official Microsoft security advisories for patch deployment information and timelines.

The vulnerabilities are particularly concerning in environments with multiple user accounts and elevated-privilege access scenarios.

Internal network security and access controls are critical for mitigating these threats. Organizations should review and restrict unnecessary elevated access permissions, notably by limiting the number of user accounts with administrative privileges.

Implementing the principle of least privilege across systems reduces the attack surface and limits potential impact.

Apply security updates as soon as they become available from Microsoft. Maintain the current inventory of Windows systems within your infrastructure to ensure comprehensive patch coverage.

Monitor systems for suspicious privilege escalation attempts and unusual Remote Access Connection Manager activity as interim protective measures.

Both vulnerabilities are tracked on CVE.org and have been assigned official designations by Microsoft’s security response team, ensuring they will receive continued attention and patch prioritization across Windows product lines.

Find this Story Interesting! Follow us on Google News, LinkedIn and X to Get More Instant Update