Microsoft Patches Multiple Windows Elevation-of-Privilege Flaws in Networking Components

Microsoft disclosed and patched several Windows elevation-of-privilege vulnerabilities affecting networking-related components, including Windows Remote Access Connection Manager, Windows SMB Server, and Network Connection Status Indicator (NCSI). The issues tracked as CVE-2025-62474, CVE-2025-62472, CVE-2025-47955, CVE-2025-59201, and CVE-2025-58726 could allow attackers with limited access to gain higher privileges on targeted systems, extending a pattern of privilege-escalation risk previously seen in the same Remote Access Connection Manager component with CVE-2022-21914.

Among the disclosed flaws, Microsoft provided additional detail for CVE-2025-58726, describing an Important improper access control issue in Windows SMB Server that can let an authorized low-privilege attacker elevate to SYSTEM over the network by coercing a victim machine to authenticate to an attacker-controlled SMB server using a specially crafted script. Microsoft assigned the bug CWE-284 and a CVSS v3.1 score of 7.5, said exploitation required specific conditions involving an unused or nonexistent Service Principal Name on the target, and stated that the vulnerability was neither publicly disclosed nor exploited in the wild at publication and that a security fix was available.