High · published December 9, 2025
⚡ An authorized attacker can elevate their privileges locally in Windows Remote Access Connection Manager! It’s like giving someone a master key to your office without the security personnel noticing! 🔐 Picture a hotel where a guest finds a way to access the staff-only areas, sneaking behind the desk to access all the confidential records. The improper access control here allows them to stroll right into restricted zones, causing chaos! Imagine if that guest could suddenly change room charges, access sensitive information, or even make unauthorized bookings! In a similar fashion, an attacker could exploit this vulnerability to gain elevated privileges on your system, leading to potentially devastating consequences for your data and security.
Picture a hotel where a guest finds a way to access the staff-only areas, sneaking behind the desk to access all the confidential records. The improper access control here allows them to stroll right into restricted zones, causing chaos! This vulnerability arises from improper access control in the Windows Remote Access Connection Manager, enabling an authorized user to escalate their privileges locally without proper restrictions in place.
Imagine if that guest could suddenly change room charges, access sensitive information, or even make unauthorized bookings! In a similar fashion, an attacker could exploit this vulnerability to gain elevated privileges on your system, leading to potentially devastating consequences for your data and security. To address this vulnerability, ensure your systems are updated to the latest security patch provided by Microsoft. Regularly review user permissions to limit unnecessary access rights, and consider implementing additional security measures like monitoring user activities. You've got this! By taking action now, you'll bolster your security and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1607 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8688 | 10.0.14393.8688 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |