Vulnerabilities

CVSS

7.7 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C

Risk score

61.6

Published

2025-10-14

Status

Published

Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.

Weaknesses

CWE-362CWE-73

Coverage 1

threat-intel

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

This week's ThreatsDay highlights a diverse range of cyber threats, from global fraud operations and ransomware tool overlaps to sophisticated social engineering attacks and vulnerabilities in popular software. Key event…

The Hacker News · Jul 9, 2026 High

CVE-2026-9181CVE-2025-49760CVE-2025-59200CHTAESsocial engineeringphishingransomware

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59200