CVE-2025-10263: ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]

Overview

Severity
Critical (CVSS 9.3)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Category
Elevation of Privilege
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2026-Jun
Released
2026-06-09
EPSS Score
0.02% (percentile: 4.2%)

Description

No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

FAQ

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability? An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges. How could an attacker exploit this vulnerability? An attacker could exploit this issue by triggering a specific timing condition during a memory permission change, causing a memory write to be applied using outdated permissions. Under these conditions, a write from a lower‑privileged context could succeed even after access should have been restricted.

Affected Products (6)

Windows

  • Windows 11 Version 26H1 for ARM64-based Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 11 Version 25H2 for ARM64-based Systems
  • Windows 11 Version 23H2 for ARM64-based Systems
  • Windows 11 Version 24H2 for ARM64-based Systems

ESU

  • Windows 10 Version 22H2 for ARM64-based Systems

Security Updates (4)

Revision History

  • 2026-06-09: Information published.