An authenticated local privilege escalation vulnerability in the Windows Runtime allows attackers to gain elevated permissions on the system.

This is a use-after-free vulnerability within the Windows Runtime environment. It requires the attacker to have local access and low-level privileges to trigger the flaw and elevate their access rights.

By enabling privilege escalation, this vulnerability allows a standard user to gain administrative or system-level control over a machine. With a CVSS score of 8.8, this poses a significant risk to the confidentiality and integrity of local data, as well as the overall security posture of the endpoint.

Immediate Action: Deploy the latest cumulative security updates from Microsoft to all affected Windows 11 and Windows Server 2025 endpoints.

Proactive Monitoring: Monitor system logs for unusual process execution or unauthorized attempts to perform administrative tasks by standard user accounts.

Compensating Controls: Implement strict application control policies and limit user permissions to the minimum necessary for daily tasks, which helps contain the impact of local exploits.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the rollout of these security updates to all Windows endpoints and servers. Addressing local privilege escalation is essential to preventing lateral movement and securing the enterprise against sophisticated local threats.