High · published December 9, 2025
⚡ An authorized attacker can leverage uninitialized resources in Windows Remote Access Connection Manager to elevate their privileges! 😱 Think of this as a VIP lounge where someone gets a backstage pass without proper credentials — they can access places they shouldn't be able to go. In this case, a crafty user could gain significantly more control over the system than intended. If exploited, this vulnerability could allow an attacker to gain elevated privileges, potentially leading to unauthorized control over critical system functions. Imagine the chaos if someone could change settings, install malicious software, or access sensitive data without proper authorization—absolutely devastating!
Think of this as a VIP lounge where someone gets a backstage pass without proper credentials — they can access places they shouldn't be able to go. In this case, a crafty user could gain significantly more control over the system than intended. This flaw arises from uninitialized resources in the Windows Remote Access Connection Manager, enabling local privilege escalation by authorized users who exploit this oversight.
If exploited, this vulnerability could allow an attacker to gain elevated privileges, potentially leading to unauthorized control over critical system functions. Imagine the chaos if someone could change settings, install malicious software, or access sensitive data without proper authorization—absolutely devastating! To protect against this, ensure your system is updated with the latest patches from Microsoft. Additionally, review user permissions and limit access to only those who absolutely need it. Regular audits of system settings can help you maintain a secure environment! You've got this! By following these steps, you'll boost your system's defenses and keep those sneaky attackers at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |