Security Update News
Update Information
| Title | Windows Connected Devices Platform Service Remote Code Execution Vulnerability |
|---|---|
| Update ID | MS:CVE-2025-49724 |
| Type | mscve |
| Published | 2025-07-08T07:00:00 |
| Last Updated | 2025-07-08T07:00:00 |
Security Impact
| CVSS Score | 8.8 |
|---|---|
| Severity | HIGH |
AI Analysis
| AI Description | A use-after-free vulnerability in the Windows Connected Devices Platform Service could allow remote code execution by an unauthorized attacker. This issue is critical due to the potential for remote exploitation without user interaction. It affects the Windows Connected Devices Platform Service, which is part of the Windows operating system. Users and administrators are advised to apply patches as soon as possible. |
|---|---|
| AI Severity | Critical |
| AI Vendor | Microsoft |
| AI Product | Windows Connected Devices Platform Service |
Affected CVEs
- CVE-2025-49724
Update Details
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.