Executive brief
Windows Management Instrumentation (WMI) is a core Windows system component used for system administration and monitoring tasks. A race condition vulnerability in WMI allows an authorized local attacker to execute code with elevated privileges, potentially gaining full system access and compromising the security of the entire computer.
Technical details
A race condition exists in Windows Management Instrumentation due to improper synchronization when accessing shared resources. The vulnerability affects the concurrent execution path and can be exploited by an attacker with local access to elevate their privileges. An authorized user is required to trigger the condition, but successful exploitation results in privilege escalation to a higher privilege level. Microsoft has released security patches to address this synchronization issue.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed