Executive brief
Windows Secure Kernel Mode is a security layer that protects critical system operations in Microsoft Windows. An authorized attacker can exploit an untrusted pointer dereference vulnerability to bypass security controls and gain elevated privileges on a local system, potentially compromising the entire machine.
Technical details
The vulnerability exists in Windows Secure Kernel Mode due to unsafe handling of untrusted pointer values. An attacker with local system access can craft a malicious request that dereferences a pointer to memory they control, allowing arbitrary code execution in the kernel. The attack requires authorization to the affected component but enables privilege escalation from a lower-privileged context to kernel-level access. Microsoft has released patches to address the unsafe pointer dereference.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed