High · published January 13, 2026
⚡ A local attacker can escalate privileges due to a use-after-free flaw lurking in Windows Management Services! 💥 Think of it as a hotel guest who mistakenly receives a key card that still works for several rooms even after their stay has ended — they can waltz right into areas they shouldn’t access! If exploited, this vulnerability could allow an attacker to gain unauthorized control over sensitive system functions, leading to complete compromise of the host system. Imagine them pulling off administrative tasks, altering configurations, or even installing malicious software — all without leaving a trace!
Think of it as a hotel guest who mistakenly receives a key card that still works for several rooms even after their stay has ended — they can waltz right into areas they shouldn’t access! This use-after-free vulnerability in Windows Management Services allows an attacker to leverage freed memory addresses to escalate their privileges, effectively bypassing normal security controls.
If exploited, this vulnerability could allow an attacker to gain unauthorized control over sensitive system functions, leading to complete compromise of the host system. Imagine them pulling off administrative tasks, altering configurations, or even installing malicious software — all without leaving a trace! To protect your systems, ensure that you apply the latest security patches from Microsoft as soon as they are available. Regularly audit your systems to identify unauthorized access and consider limiting local access to sensitive areas. Don't wait until it's too late! You've got this! Stay vigilant and patch your systems to keep those attackers at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.32230 | 10.0.26100.32230 |