H-ISAC TLP White Vulnerability Bulletins: An Elevation of Privilege Zero-Day Vulnerability in Microsoft's Windows Kernel

On November 11, 2025, Microsoft publicly disclosed a high-severity Elevation of Privilege (EoP) zero-day vulnerability found in the Windows Kernel, tracked as CVE-2025-62215 (CVSS Score: 7.0). Microsoft also released a patch for the vulnerability on the same date.

Microsoft has not disclosed any information regarding the attacks that exploit the vulnerability, although it has confirmed that this flaw is actively being exploited in the wild.

Health-ISAC is sharing this information to increase situational awareness and encourage organizations to assess their risk level associated with this vulnerability.

View the detailed report below.