Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
Weakness
The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_11_24h2 | Microsoft | * | 10.0.26100.7092 (excluding) |
| Windows_11_25h2 | Microsoft | * | 10.0.26200.7092 (excluding) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/17.html
- https://cwe.mitre.org/data/definitions/30.html
- https://cwe.mitre.org/data/definitions/35.html