CVE-2025-64658

An elevation of privilege flaw in Windows File Explorer, rated High Severity at CVSS 8.8, affecting Windows 10 1809 and Windows Server 2019. Explorer runs in every interactive session, so the exploitation scenario is a local one: malicious content or a compromised low-privilege process leveraging the shell to gain higher rights. With a 5 percent exploit probability it is a standard-cadence patch, but privilege escalations like this are exactly what commodity malware bundles after initial access.

Do this: Include this in the monthly baseline for all Windows 10 1809 desktops and any Server 2019 hosts where users log on interactively.

AI-generated from public data, 2026-07-07. Verify against the vendor advisory before acting.