Microsoft Windows Storage Spaces Controller Privilege Escalation Vulnerability

A vulnerability allowing out-of-bounds read has been identified in Windows Storage Spaces Controller. This issue allows an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows 11 versions and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Security update KB5083768 is available for Windows 11 versions 26H1, 24H2, 23H2, and 25H2, as well as for Windows Server 2025. For Windows Server 2022, 23H2 Edition (Server Core installation), security update KB5082060 is available.