Microsoft Windows TCP/IP Driver Privilege Escalation Vulnerability

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in the Windows TCP/IP driver. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from a race condition that exploitation requires an attacker to win, according to Microsoft's exploitability assessment.

Impact

Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the September 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific knowledge base articles for the update can also be found on the Microsoft Support website.