{"metadata": {"vulnerability": "CVE-2025-64669", "count": 43, "kinds": {"milestone": 8, "sighting": 14, "kev": 0, "other": 21}}, "data": [{"timestamp": "2025-11-06T23:40:37.276Z", "date_only": false, "value": "2025-11-06T23:40:37.276Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-64669", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": true, "value": "2025-12-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1104", "record": "CERTFR-2025-AVI-1104", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-09T16:00:00Z", "date_only": false, "value": "2025-12-09T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2025-64669", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T08:00:00Z", "date_only": false, "value": "2025-12-11T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-12-11T18:06:13.821Z", "date_only": false, "value": "2025-12-11T18:06:13.821Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-64669", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T18:16:24Z", "date_only": false, "value": "2025-12-11T18:16:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-86V4-5HV3-JFF7", "record": "GHSA-86V4-5HV3-JFF7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-12-11T18:16:24.393Z", "date_only": false, "value": "2025-12-11T18:16:24.393", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-64669", "record": "FKIE_CVE-2025-64669", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T18:30:46Z", "date_only": false, "value": "2025-12-11T18:30:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-86V4-5HV3-JFF7", "record": "GHSA-86V4-5HV3-JFF7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T18:30:46Z", "date_only": false, "value": "2025-12-11T18:30:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-86V4-5HV3-JFF7", "record": "GHSA-86V4-5HV3-JFF7", "field": "modified"}, {"timestamp": "2025-12-11T23:00:00Z", "date_only": false, "value": "2025-12-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2827", "record": "WID-SEC-W-2025-2827", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-11T23:00:00Z", "date_only": false, "value": "2025-12-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2827", "record": "WID-SEC-W-2025-2827", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T23:00:00Z", "date_only": false, "value": "2025-12-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2827", "record": "WID-SEC-W-2025-2827", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-11T23:00:00Z", "date_only": false, "value": "2025-12-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2827", "record": "WID-SEC-W-2025-2827", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1104", "record": "CERTFR-2025-AVI-1104", "field": "last_revision_date"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1104", "record": "CERTFR-2025-AVI-1104", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1104", "record": "CERTFR-2025-AVI-1104", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-12T04:55:52.442Z", "date_only": false, "value": "2025-12-12T04:55:52.442290Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-64669", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-12-12T04:55:52.442Z", "date_only": false, "value": "2025-12-12T04:55:52.442290Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-64669", "record": "FKIE_CVE-2025-64669", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-12-12T10:45:01.329Z", "date_only": false, "value": "2025-12-12T10:45:01.329+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2827", "record": "WID-SEC-W-2025-2827", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-12T13:50:28.919Z", "date_only": false, "value": "2025-12-12T13:50:28.919216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa7ooc2d24", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "ee2c31ef-121f-4d51-8dbf-3e3c98fa320b", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa7ooc2d24"}, {"timestamp": "2025-12-17T15:12:07.226Z", "date_only": false, "value": "2025-12-17T15:12:07.226763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ma6x4aoh5o2m", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "ff3b8b47-2698-4c2e-8ae7-ff0faddb4501", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3ma6x4aoh5o2m"}, {"timestamp": "2025-12-17T22:27:38.555Z", "date_only": false, "value": "2025-12-17T22:27:38.555683Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-f1f724e6-303857dbf8cb9817", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "ce036fc3-599d-4c30-a750-a42096db33e9", "url": "https://poliverso.org/objects/0477a01e-f1f724e6-303857dbf8cb9817"}, {"timestamp": "2025-12-18T09:48:20.886Z", "date_only": false, "value": "2025-12-18T09:48:20.886813Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3maavi42tjc2k", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "135f773e-1e79-4a9b-912f-00be785e2622", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3maavi42tjc2k"}, {"timestamp": "2026-02-19T21:09:32.452Z", "date_only": false, "value": "2026-02-19T21:09:32.452477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mfaiwci5md2p", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "952e13ad-3fff-4abe-9e52-dd373f3621b4", "url": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mfaiwci5md2p"}, {"timestamp": "2026-02-26T16:21:03.657Z", "date_only": false, "value": "2026-02-26T16:21:03.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-64669", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-16T07:00:00Z", "date_only": false, "value": "2026-04-16T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-04-16T07:00:00Z", "date_only": false, "value": "2026-04-16T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-16T14:18:19.307Z", "date_only": false, "value": "2026-04-16T14:18:19.307Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-16T14:19:08.517Z", "date_only": false, "value": "2026-04-16T14:19:08.517Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-64669", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-16T14:19:08.517Z", "date_only": false, "value": "2026-04-16T14:19:08.517Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2025-64669", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T23:41:18.039Z", "date_only": false, "value": "2026-05-07T23:41:18.039837Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mlcfckza7b2z", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "2ac2906a-cac6-453e-a187-d86baa4c3922", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center", "url": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mlcfckza7b2z"}, {"timestamp": "2026-07-20T19:00:09.249Z", "date_only": false, "value": "2026-07-20T19:00:09.249711Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2966", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "7b0451fa-7fe3-4360-aa8b-38cb5e19ad33", "content": "CVE-2025-64669  Windows Admin Center \n*\nUncovering Local Privilege Escalation\n\nall in one", "url": "https://t.me/proxy_bar/2966"}, {"timestamp": "2026-07-29T08:01:21.112Z", "date_only": false, "value": "2026-07-29T08:01:21.112269Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5549", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "2ce5d71c-1a0d-4567-87ae-e9172f47838d", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center #CVE202564669 #WindowsAdminCenter #PrivilegeEscalation #CymulateResearch #Vulnerability https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/reverseame/5549"}, {"timestamp": "2026-08-01T23:00:05.428Z", "date_only": false, "value": "2026-08-01T23:00:05.428333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5549", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "92b0c1fd-fa73-45c9-a56d-9dec03bc6868", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center #CVE202564669 #WindowsAdminCenter #PrivilegeEscalation #CymulateResearch #Vulnerability https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/reverseame/5549", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T16:00:04.395Z", "date_only": false, "value": "2026-08-14T16:00:04.395021Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1340", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "20c74fda-77bf-43bc-aab8-056bc5ecc7c2", "content": "\u2705  CVE-2025-64669 (CVSS 7.8): LPE \u0432 Windows Admin Center\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cymulate Research Labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u0440\u043e LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Windows Admin Center (\u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e WAC 2411), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441 low-privileged user \u0434\u043e SYSTEM. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u043f\u043a\u0430 C:\\ProgramData\\WindowsAdminCenter \u0438\u043c\u0435\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b WAC \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043e\u0442\u0442\u0443\u0434\u0430 \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0438\u0445 \u043e\u0442 SYSTEM.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0434\u0432\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\n\ud83d\udd35 Extension Uninstall Mechanism Abuse \u2014 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 signed PowerShell-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0432 C:\\ProgramData\\WindowsAdminCenter\\Extensions\\\\uninstall\\, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043e\u0442 SYSTEM \u043f\u0440\u0438 \u0434\u0435\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 WAC UI/API\u200b.\n\ud83d\udd35 Updater DLL Hijacking \u2014 TOCTOU-\u0430\u0442\u0430\u043a\u0430 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 DLL \u0432 C:\\ProgramData\\WindowsAdminCenter\\Updater\\ \u0447\u0435\u0440\u0435\u0437 WMI Event \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 WindowsAdminCenterUpdater.exe, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 SYSTEM \u043f\u0440\u0438 \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430 /api/update.\n\n\u0417\u0430\u0449\u0438\u0442\u0430\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Windows Admin Center \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432\u044b\u0448\u0435 WAC 2411.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0440 \u0438\u043b\u0438 \u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f:\n\n\ud83d\udd35 \u0418\u0437\u043c\u0435\u043d\u0438\u0442\u0435 ACL \u043d\u0430 C:\\ProgramData\\WindowsAdminCenter \u2014 \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u0435 \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\u200b.\n\ud83d\udd35 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u043f\u0430\u043f\u043a\u0430\u043c Extensions\\ \u0438 Updater\\ \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f SYSTEM \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u27a1\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n#blue_team #CVE #Windows #LPE", "url": "https://t.me/purp_sec/1340"}, {"timestamp": "2026-09-01T20:00:15.050Z", "date_only": false, "value": "2026-09-01T20:00:15.050272Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/176015", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "cf923c9d-6de7-493c-a87c-2b0467e716f6", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center\nhttps://www.reddit.com/r/redteamsec/comments/1pncyhx/cve202564669_uncovering_local_privilege/\n\nMicrosoft has released a fix for CVE-2025-64669, addressing a local privilege escalation vulnerability we reported in Windows Admin Center.\n This issue allowed low privileged users to escalate to SYSTEM by abusing trusted components under insecure filesystem permissions. Microsoft validated the finding and shipped a fix as part of the latest update.\n This CVE represents only the first vulnerability from our research.\n We identified four distinct vulnerabilities during the investigation, and additional fixes and disclosures are coming.\n More details soon.\n Stay tuned.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/cve-2025-64669-windows-admin-center/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1pncyhx/cve202564669_uncovering_local_privilege/)", "url": "https://t.me/hacking_Attack/176015"}, {"timestamp": "2026-09-02T06:00:15.388Z", "date_only": false, "value": "2026-09-02T06:00:15.388151Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/44809", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "7b49e765-c741-45c1-8c09-84050ee1a655", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center  https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/HackingTeamGrupoOfficial/44809"}, {"timestamp": "2026-09-03T00:00:47.332Z", "date_only": false, "value": "2026-09-03T00:00:47.332490Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/44809", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "dda9bd95-d3e4-48e2-a024-e287c3d5a959", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center  https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/HackingTeamGrupoOfficial/44809", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T02:00:04.141Z", "date_only": false, "value": "2026-09-03T02:00:04.141313Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/176015", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "5276c73c-c7a8-4fb1-b1bb-1df156733cfc", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center\nhttps://www.reddit.com/r/redteamsec/comments/1pncyhx/cve202564669_uncovering_local_privilege/\n\nMicrosoft has released a fix for CVE-2025-64669, addressing a local privilege escalation vulnerability we reported in Windows Admin Center.\n This issue allowed low privileged users to escalate to SYSTEM by abusing trusted components under insecure filesystem permissions. Microsoft validated the finding and shipped a fix as part of the latest update.\n This CVE represents only the first vulnerability from our research.\n We identified four distinct vulnerabilities during the investigation, and additional fixes and disclosures are coming.\n More details soon.\n Stay tuned.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/cve-2025-64669-windows-admin-center/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1pncyhx/cve202564669_uncovering_local_privilege/)", "url": "https://t.me/hacking_Attack/176015", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T20:10:01.970Z", "date_only": false, "value": "2026-10-07T20:10:01.970", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-64669", "record": "FKIE_CVE-2025-64669", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T10:31:34.395Z", "anchors": {"origin": {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-01T23:00:05.428Z", "date_only": false, "value": "2026-08-01T23:00:05.428333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5549", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "92b0c1fd-fa73-45c9-a56d-9dec03bc6868", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center #CVE202564669 #WindowsAdminCenter #PrivilegeEscalation #CymulateResearch #Vulnerability https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/reverseame/5549", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 20386805.428, "hours": 5663.001507777778, "days": 235.9583961574074, "min_seconds": 20300405.428, "max_seconds": 20386805.428, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-01T23:00:05.428Z", "date_only": false, "value": "2026-08-01T23:00:05.428333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5549", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "92b0c1fd-fa73-45c9-a56d-9dec03bc6868", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center #CVE202564669 #WindowsAdminCenter #PrivilegeEscalation #CymulateResearch #Vulnerability https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/reverseame/5549", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 28800.0, "hours": 8.0, "days": 0.3333333333333333, "min_seconds": -57600.0, "max_seconds": 28800.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 28800.0, "hours": 8.0, "days": 0.3333333333333333, "min_seconds": 0.0, "max_seconds": 28800.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -20358005.428, "hours": -5655.001507777778, "days": -235.62506282407406, "min_seconds": -20358005.428, "max_seconds": -20358005.428, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-08-01T23:00:05.428Z", "date_only": false, "value": "2026-08-01T23:00:05.428333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5549", "record": "CVE-2025-64669", "field": "creation_timestamp", "uuid": "92b0c1fd-fa73-45c9-a56d-9dec03bc6868", "content": "CVE-2025-64669: Uncovering Local Privilege Escalation Vulnerability in Windows Admin Center #CVE202564669 #WindowsAdminCenter #PrivilegeEscalation #CymulateResearch #Vulnerability https://cymulate.com/blog/cve-2025-64669-windows-admin-center/", "url": "https://t.me/reverseame/5549", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-64669", "record": "MSRC_CVE-2025-64669", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}