Microsoft Windows Hotpatch Monitoring Service Privilege Escalation Vulnerability

A vulnerability allowing out-of-bounds write in the Windows Hotpatch Monitoring Service has been identified. This flaw enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows 11 versions, Windows Server 2025, and various build numbers.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Security Update KB5094125 is available for Windows Server 2025, while KB5095051 can be downloaded for Windows 11 versions 26H1, 24H2, and 25H2. For Windows Server 2025 (Server Core installation), the security update KB5094125 is also available.