Executive brief
A security vulnerability exists in the Windows Event Logging Service, which is responsible for recording system and application activities. An attacker who already has basic access to a computer could exploit this flaw to gain full administrative control over the system. This could allow them to view sensitive data, modify system settings, or disrupt operations.
Technical details
A local privilege escalation vulnerability exists in the Windows Event Logging Service due to improper access control (CWE-284). An attacker with low-privileged local access can exploit this flaw to execute code with elevated system privileges. The attack vector is local, requiring the attacker to already have a foothold on the target machine, but it requires no user interaction. Successful exploitation grants the attacker full confidentiality, integrity, and availability impact over the affected host. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-05-12: advisory: Initial advisory published by Microsoft and NVD.