Back to vendor advisories
Microsoft Security Response CenterCVE-2025-10263

ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]

CriticalVendor CVSS 9.3 / 10 1 CVE Published Jun 9, 2026 at 7:00 AM UTC

Summary

No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Products covered

  • Windows 11 Version 26H1 for ARM64-based Systems

  • Windows 10 Version 21H2 for ARM64-based Systems

  • Windows 10 Version 22H2 for ARM64-based Systems

  • Windows 11 Version 25H2 for ARM64-based Systems

  • Windows 11 Version 23H2 for ARM64-based Systems

  • Windows 11 Version 24H2 for ARM64-based Systems

Remediation

Install KB5095051. Install KB5094127. Install KB5094126. Install KB5093998.

Vendor-listed fixes

  • 10.0.28000.2269

  • 10.0.19044.7417

  • 10.0.19045.7417

  • 10.0.26200.8655

  • 10.0.22631.7219

  • 10.0.26100.8655

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.