Executive brief
Windows Credential Providers, a system component used to authenticate users during login, contains a heap buffer overflow vulnerability. An attacker with local system access could exploit this flaw to execute code with elevated privileges, potentially gaining full control of the affected computer.
Technical details
A heap-based buffer overflow exists in Windows Credential Providers that can be triggered by an authorized local attacker to achieve privilege escalation. The vulnerability requires local access and existing user privileges to exploit. Successful exploitation allows an attacker to execute arbitrary code with higher privileges than their current session, potentially leading to full system compromise. Microsoft has released security updates to remediate this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed