A high-severity local privilege escalation vulnerability in the Windows Kernel could allow an authenticated attacker to gain full system control.

This vulnerability is a time-of-check time-of-use (TOCTOU) race condition in Windows Kernel Memory, which can be triggered by an attacker who already possesses low-level local user privileges.

The ability for a local user to escalate privileges to the kernel level poses a severe risk to organizational security. Successful exploitation could lead to full system compromise, unauthorized access to sensitive data, and the ability to disable security software, resulting in significant operational disruption and data breach potential. The CVSS score of 7.8 reflects the high impact on confidentiality, integrity, and availability despite the requirement for local access.

Immediate Action: Apply the relevant security updates provided in the Microsoft Security Update Guide immediately to remediate the affected kernel components.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected requests to kernel-mode drivers that might indicate an attempt to exploit race conditions.

Compensating Controls: Enforce the principle of least privilege to restrict the number of users capable of executing local code, thereby reducing the attack surface for local privilege escalation.

Public Exploit Available: Unknown.

Given the potential for complete system compromise via kernel-level privilege escalation, this vulnerability should be treated with high urgency. Administrators must prioritize the deployment of the official Microsoft patches across all identified versions of Windows 10 and Windows 11 to effectively mitigate this risk.