Executive brief
Windows File History Service is a built-in Windows feature that allows users to back up and restore their files. A use-after-free vulnerability in this service allows an authorized local user to crash the service or execute arbitrary code with system privileges, potentially enabling them to take full control of the affected computer.
Technical details
This vulnerability is a use-after-free (UAF) memory safety issue in the Windows File History Service. The vulnerability requires an authorized local user to trigger, meaning the attacker must already have a user account on the target system. By manipulating the service's memory management, an attacker can cause the service to reference freed memory, leading to either a denial of service or arbitrary code execution in the context of the system service. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed