CVE-2025-59515

High · 7.0

CVSS

7.0

EPSS

0.4%

Published

Nov 11, 2025

CISA due date

—

The record

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Ecosystem	Package	Introduced	Fixed