Description
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Windows 11 version 23H2 | Microsoft / Windows 11 version 23H2 | >= 10.0.22631.0, < 10.0.22631.7582 | affected |
| Windows 11 Version 23H2 | Microsoft / Windows 11 Version 23H2 | >= 10.0.22631.0, < 10.0.22631.7582 | affected |
| Windows 11 Version 24H2 | Microsoft / Windows 11 Version 24H2 | >= 10.0.26100.0, < 10.0.26100.9445 | affected |
| Windows 11 Version 25H2 | Microsoft / Windows 11 Version 25H2 | >= 10.0.26200.0, < 10.0.26200.9445 | affected |
| Windows 11 version 26H1 | Microsoft / Windows 11 version 26H1 | >= 10.0.28000.0, < 10.0.28000.2954 | affected |
| Windows Server 2025 | Microsoft / Windows Server 2025 | >= 10.0.26100.0, < 10.0.26100.33438 | affected |
| Windows Server 2025 (Server Core installation) | Microsoft / Windows Server 2025 (Server Core installation) | >= 10.0.26100.0, < 10.0.26100.33438 | affected |