Microsoft Fixes Windows Elevation of Privilege Flaws in Event Tracing and Core Messaging

Microsoft disclosed two Windows elevation of privilege vulnerabilities affecting core operating system components: CVE-2025-47985 in Windows Event Tracing and CVE-2025-21358 in Windows Core Messaging. Both issues were published through Microsoft's Security Update Guide and classified as local privilege escalation flaws, indicating that successful exploitation could allow an attacker with existing access to a system to gain higher privileges.

The vulnerabilities affect separate Windows subsystems but share the same security impact: they could be used to move from limited user access to more powerful execution on a compromised host. Microsoft released advisories for both flaws through its official update channels, underscoring the need for defenders to prioritize Windows patching and review systems where privilege escalation could enable broader compromise, persistence, or lateral movement.