Windows Kernel Elevation of Privilege Vulnerability

A user with local access to a Windows system could exploit an out-of-bounds read in the kernel to gain elevated privileges, potentially allowing them to access sensitive data on systems like HMIs or engineering workstations used to control industrial equipment.

Any organization running Windows 10, Windows 11, or Windows Server systems should care, particularly those with HMIs (Human Machine Interfaces), engineering workstations, or any Windows-based control system that could be compromised through local access. This affects 32-bit, x64, and ARM64 systems across multiple Windows versions and editions.

An attacker with a local user account on the Windows system would trigger the out-of-bounds read in the kernel memory to elevate their privilege level. This could occur if an attacker has physical access to a machine, gains access through a compromised user account, or if malicious code is already running on the system.