CVE-2025-50177

—

CVSS 3.1

8.1 high

EPSS

4%p90

Published

Aug 12, 2025 (Aug 12, 2025)

Modified

Jun 17, 2026

Description

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 22h2, windows 11 23h2, windows 11 24h2, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-362, CWE-416
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news3 stories

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero

The Hacker NewsAug 17, 08:42 UTC · Aug 17, 2025Vulnerability CVE-2025-53786 CVE-2025-53779 CVE-2025-53767+9 CVEs

60

Microsoft Fixes Over 100 CVEs on August Patch Tuesday

Infosecurity MagazineAug 13, 09:45 UTC · Aug 13, 2025Vulnerability in the wildCVE-2025-53779 CVE-2025-53778 CVE-2025-50177+1 CVEs

60

Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities

Cisco TalosAug 12, 19:39 UTC · Aug 12, 2025Vulnerability in the wildCVE-2025-50176 CVE-2025-50177 CVE-2025-53778+10 CVEs

60