Microsoft Windows VBS Enclave Security Feature Bypass Vulnerability

A security feature bypass vulnerability has been identified in Windows Virtualization-Based Security (VBS) Enclave. This vulnerability arises from insufficient verification of data authenticity, allowing an authorized attacker to locally bypass a security feature. The issue affects multiple Windows versions, including Windows 10 (all editions), Windows 11 (all editions), and Windows Server 2016, 2019, 2022, and 2025. The vulnerability requires high privileges to exploit.

Impact

Exploitation of this vulnerability allows for a local bypass of the Virtualization-Based Security feature.

Remediation

Security updates are available for all affected Windows versions. Users can download these updates through the Microsoft Update Catalog.