A local privilege escalation vulnerability in the Microsoft Windows WLAN Service allows an authorized attacker to gain elevated system permissions.

This flaw involves the improper handling of file paths within the Windows WLAN Service, classified as CWE-73. An attacker with local access and low privileges can manipulate these paths to execute operations with higher system rights.

Successful exploitation permits a local user to escalate their privileges, potentially gaining full administrative control over the affected workstation or server. Given the CVSS score of 7.8, this vulnerability poses a significant risk to organizational security, as it facilitates lateral movement, unauthorized data access, and the complete compromise of system integrity.

Immediate Action: Apply the relevant security updates provided by Microsoft in the November 2025 patch cycle for the specific version of Windows in use.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unauthorized file system modifications occurring within the WLAN service environment.

Compensating Controls: Ensure that principle of least privilege is enforced on all endpoints to limit the number of users capable of executing local code, thereby reducing the attack surface for privilege escalation.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to the integrity of Windows endpoints. Security teams should prioritize the deployment of the November 2025 security updates across all affected Windows 10 and 11 environments to eliminate the potential for local privilege escalation.