Windows Kernel Elevation of Privilege Vulnerability

A user with local access to a Windows system could exploit a kernel memory flaw to gain administrative privileges, potentially allowing them to modify control logic, access sensitive process data, or disable safety systems on any connected OT devices.

Organizations running Windows as engineering workstations, HMI servers, or data historians in water utilities, electric distribution, or manufacturing environments. Particularly affects sites where Windows systems have network connectivity to PLCs, RTUs, or other control devices, or where engineering staff use Windows machines to configure and monitor OT systems.

An attacker with a local user account on a Windows machine running vulnerable kernel code could trigger a use-after-free condition to write arbitrary data to kernel memory. Once privileges are escalated to SYSTEM level, the attacker could access engineering software, HMI systems, or network access credentials that grant control over PLCs and field devices.