Microsoft Windows Storage Spaces Controller Elevation of Privilege Vulnerability

A vulnerability allowing integer underflow in Windows Storage Spaces Controller has been identified, which could enable an authorized attacker to locally elevate privileges. This issue affects multiple versions of Windows 11 and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Security update KB5083768 is available for Windows 11 versions 26H1, 24H2, 23H2, and 25H2, as well as for Windows Server 2025. For Windows Server 2022, 23H2 Edition (Server Core installation), security update KB5082060 can be downloaded from the Microsoft Update Catalog.