Executive brief
A security vulnerability has been identified in the Windows Kernel, the core component of the Microsoft Windows operating system. An attacker who already has basic access to a system could exploit this flaw to gain full administrative control. This could lead to unauthorized access to sensitive data, system-wide changes, or the ability to disable security protections.
Technical details
A local privilege escalation vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). An attacker with low-privileged access to a target system can execute a specially crafted application to trigger the vulnerability. Successful exploitation allows the attacker to gain SYSTEM privileges, providing full control over the affected host. The vulnerability impacts multiple versions of Windows 10, Windows 11, and Windows Server. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows 10 Version 21H2 10.0.19044.0 to 10.0.19044.7548
- Microsoft Windows 10 Version 22H2 10.0.19045.0 to 10.0.19045.7548
- Microsoft Windows 11 Version 24H2 10.0.26100.0 to 10.0.26100.8875
- Microsoft Windows 11 Version 25H2 10.0.26200.0 to 10.0.26200.8875
- Microsoft Windows 11 version 26H1 10.0.28000.0 to 10.0.28000.2269
- Microsoft Windows Server 2022 10.0.20348.0 to 10.0.20348.5386
- Microsoft Windows Server 2025 10.0.26100.0 to 10.0.26100.33158
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory