CVE-2025-10199

vendorUSosv

A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows

view advisory published 2025-09-09Licence: per source

A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-31226US	low2.9	0.22% (12th)	—	2024-05-16
Sunshine is a self-hosted game stream host for Moonlight. Users who ran Sunshine versions 0.17.0 through 0.22.2 as a service on Windows may be impacted when terminating the service…

references

External citations — patches, advisories, analysis.

https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10199.jsonADVISORY
https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfpADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-10199ADVISORY
https://www.kb.cert.org/vuls/id/974249WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan