Microsoft Windows Attestation Trust Boundary Violation Vulnerability Allowing Privilege Escalation

A trust boundary violation vulnerability has been identified in Windows Attestation. This vulnerability allows an authorized attacker to locally elevate privileges. It affects multiple Windows 10 versions, Windows 11, and various Windows Server releases.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5094122 for Windows Server 2016, Windows 10 Version 1607, and several other Windows 10 and Windows Server versions. Instructions for downloading this security update are available on the Microsoft Update Catalog. For Windows 11, the security update KB5095051 is available for versions 26H1, 24H2, and 23H2. Windows Server 2025 users can also apply the security update KB5094125. Details for all these updates can be found in the Microsoft Knowledge Base articles linked in the vulnerability references.