Microsoft Windows TCP/IP Elevation of Privilege Vulnerability

A race condition vulnerability has been identified in the Windows TCP/IP stack, allowing an authorized attacker to locally elevate privileges. This issue arises from improper synchronization in concurrent execution that involves shared resources.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5087470, KB5087471, KB5087537, KB5087541, KB5087420, KB5087544, and KB5087538.