Executive brief
Windows ALPC (Advanced Local Procedure Call) is a core component of Windows that enables secure inter-process communication within the operating system. An untrusted pointer dereference vulnerability in ALPC allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially compromising the entire system or gaining admin-level access.
Technical details
This vulnerability is a use-after-free or invalid pointer dereference in the Windows ALPC kernel subsystem. An authorized local attacker can craft a malicious ALPC message that causes the kernel to dereference an untrusted pointer, leading to memory corruption and privilege escalation from user mode to kernel mode or system privileges. Attack preconditions include local system access and the ability to establish an ALPC connection. The vulnerability enables arbitrary code execution in the context of the ALPC server process or kernel, bypassing normal privilege boundaries. Microsoft has issued a security update to patch the vulnerable pointer handling logic.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed