Microsoft Windows Elevation of Privilege Vulnerability in Network Connection Status Indicator

A vulnerability allowing local privilege escalation has been identified in the Network Connection Status Indicator (NCSI) component of Microsoft Windows. This issue arises from improper access control, which could enable an authorized attacker to elevate privileges on the affected system.

Impact

Exploitation of this vulnerability could allow an attacker to execute code with elevated privileges, specifically in the context of the 'NT AUTHORITY\Network Service' account.

Remediation

Users can apply the security update for this vulnerability, which is included in the October 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066873, KB5066875, KB5066836, KB5066780, KB5066791, and KB5066586.