Microsoft Windows ReFS Deduplication Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability has been identified in the Windows Resilient File System (ReFS) Deduplication Service. This vulnerability allows an attacker to exploit a race condition, potentially leading to unauthorized access or privileges. It affects multiple Windows 11 ARM64-based systems, Windows 11 x64-based systems, Windows Server 2025, and Windows Server 2025 (Server Core installation).

Impact

Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5051987 to address this vulnerability. This update is available through the Microsoft Update Catalog.