Executive brief
A use-after-free memory vulnerability in the Windows Kernel could allow an authenticated attacker to elevate their privileges over the network. An attacker with valid credentials could exploit this flaw to gain system-level access, potentially compromising the entire operating system and all data on the affected machine.
Technical details
The vulnerability is a use-after-free flaw in the Windows Kernel that enables privilege escalation. The issue allows an authorized attacker with network access to exploit memory management errors in kernel-mode code. By leveraging this vulnerability, an attacker can escalate from user-level privileges to system/kernel-level privileges. A patch from Microsoft is available to remediate this issue.
Affected products
- Microsoft Windows Kernel
Timeline
- 2026-09-08: disclosed