CyberICT

CVE-2025-55340

Microsoft · Published October 14, 2025

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Remote Desktop Protocol Security Feature Bypass. Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.

Affected Products

  • Windows 11 Version 25H2 for x64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C