Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Source data

Overview

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Impact & technical details

Elevation of Privilege

How could an attacker exploit this vulnerability? An attacker who already has kernel-level access could exploit this vulnerability by submitting a specially crafted Code Integrity policy to an affected system. Successful exploitation could allow the attacker to execute code in Virtual Trust Level 1 (VTL1).

What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.

CVSS base score

8.2 / 10

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Highest base score supplied by MSRC for this record; the vector belongs to that score. Ratings can vary by product. Microsoft Important is displayed as High; Moderate is displayed as Medium.

Affected products

• Windows 11 Version 26H1 for ARM64-based Systems
• Windows 11 version 26H1 for x64-based Systems

Source guidance

Remediation

The source provides update references without a separate remediation summary. Review the applicable update links below.

At least one Microsoft vendor-fix reference is available. Check each affected product for its applicable update, prerequisites, and supported version.

Authoritative sources & updates

Findings and update information come from the linked publishers. GTP compiles the public record and provides the recommendation above. CVSS ratings shown here come from Microsoft. NVD references provide additional public context.

• Microsoft Security Response Center (opens in a new tab)
• Microsoft security update · 5124012 (opens in a new tab)
• Microsoft remediation guidance (opens in a new tab)