A high-severity race condition in Windows Runtime allows authenticated local users to escalate privileges, posing a significant risk to system integrity.

This vulnerability involves a race condition (CWE-362) and a potential use after free (CWE-416) within the Windows Runtime. An attacker must possess local access and authenticated user privileges to trigger the flaw.

Successful exploitation allows an attacker to gain elevated privileges on the target system. This could lead to full system compromise, unauthorized access to sensitive data, and the ability to execute arbitrary code with higher permissions. Given the CVSS score of 8.8, this vulnerability represents a high risk to organizational security and operational continuity.

Immediate Action: Update all affected Windows 11 and Windows Server 2025 instances to the latest security patch versions provided by Microsoft.

Proactive Monitoring: Monitor system logs for suspicious process execution patterns or unexpected system crashes that may indicate exploitation attempts.

Compensating Controls: Ensure that only authorized users have local login access to sensitive servers to minimize the attack surface.

Public Exploit Available: No

The severity of this privilege escalation flaw necessitates prompt remediation. IT administrators should prioritize patching all systems running the affected Windows versions to prevent unauthorized administrative access.