A critical local privilege escalation vulnerability in the Windows Storage VSP Driver allows an authenticated attacker to achieve full system control.

The flaw is categorized as an Improper Access Control issue (CWE-284) within the Windows Storage VSP Driver. An attacker with low-level local privileges can exploit this vulnerability to execute code with elevated system permissions.

Successful exploitation of this vulnerability allows an attacker to compromise the integrity and confidentiality of the host machine by escalating privileges to the system level. Given the CVSS score of 7.8, this represents a high-severity risk that could facilitate lateral movement, unauthorized data access, and full system takeover within an enterprise environment.

Immediate Action: Administrators must apply the latest monthly security updates provided by Microsoft in the official update guide to address this flaw.

Proactive Monitoring: Monitor system logs for unauthorized attempts to access restricted storage drivers or unusual process elevation events.

Compensating Controls: Ensure that standard user accounts are restricted from executing untrusted code or scripts that could leverage local vulnerabilities.

Public Exploit Available: Unknown.

Organizations should prioritize the deployment of the December 2025 Windows security updates across all affected versions of Windows 10 and Windows 11. Due to the high potential for privilege escalation, patching is essential to prevent local threats from becoming full system compromises.