Windows Kernel Elevation of Privilege Vulnerability

An attacker with physical access to a Windows 11 system could escalate privileges to run code with full system access, potentially compromising any control software or data on that computer.

Windows administrators and OT security personnel managing engineering workstations, HMI computers, or office systems running Windows 11 Version 26H1. This primarily affects IT environments rather than direct control systems, but compromised workstations could be used to access and manipulate industrial control systems.

An attacker would need physical access to the system. They would exploit an untrusted pointer dereference in the Windows kernel to escalate from user-level to system-level privileges, allowing them to bypass administrative controls and execute arbitrary code.