Executive brief
Windows TCP/IP is a core networking component that enables all network communications on Windows systems. A race condition vulnerability in this component allows a local attacker with existing access to execute code with elevated system privileges, potentially leading to complete system compromise.
Technical details
This vulnerability is a concurrent execution race condition (CWE-362) in the Windows TCP/IP stack's shared resource handling. The flaw allows an authorized local attacker to exploit improper synchronization during network operations to escalate privileges. Exploitation requires local code execution capability and the ability to perform concurrent operations against the TCP/IP driver. The attack results in arbitrary code execution with SYSTEM privileges. A security update from Microsoft is available to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed