CVE-2025-49730

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.

Affected products

Windows

Microsoft Windows 10 1507

< 10.0.10240.21073

Microsoft Windows 10 1607

< 10.0.14393.8246

Microsoft Windows 10 1809

< 10.0.17763.7558

Microsoft Windows 10 21h2

< 10.0.19044.6093

Microsoft Windows 10 22h2

< 10.0.19045.6093

Microsoft Windows 11 22h2

< 10.0.22621.5624

CVSS 3.1

7.8 HIGH

EPSS

0.6% (46th percentile)

Weakness

CWE-367, CWE-122

NVD status

Analyzed

Published

2025-07-08