Microsoft Windows Fundamentals TOCTOU Race Condition Vulnerability Allowing Remote Code Execution

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in Windows Fundamentals. This vulnerability allows an authorized attacker to execute code remotely over a network. It affects multiple Windows products and versions, including Windows Server 2019, various Windows 10 versions, Windows Server 2012 R2, Windows Server 2008 R2, Windows Server 2016, Windows 11, and Windows Server 2022.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can apply the security update KB5058392 to address this vulnerability. This update is available through the Microsoft Update Catalog.