Microsoft Windows Kernel Elevation of Privilege Vulnerability

A vulnerability allowing elevation of privileges has been identified in the Windows Kernel. This issue arises from sensitive data being stored in improperly locked memory, which could be exploited by an authorized attacker to gain higher privileges locally. The vulnerability affects several versions of Windows, including various editions of Windows 10, Windows Server 2012, Windows Server 2008 R2, Windows Server 2016, Windows 11, and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an authorized attacker to gain SYSTEM privileges.

Remediation

Security updates for this vulnerability are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Security Update Guide.