High · 7.0 CVE-2025-26649 EUVD-2025-10223GHSA-923v-g26h-29fj

Windows Secure Channel Elevation of Privilege Vulnerability

Published Apr 8, 2025 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows Server 2022 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.5189	10.0.22621.5189
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.5189	10.0.22631.5189
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.5189	10.0.22631.5189
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.3775	10.0.26100.3775
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.3453	10.0.20348.3453
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1551	10.0.25398.1551
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.3775	10.0.26100.3775
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.3775	10.0.26100.3775

Advisories 3

WID-SEC-2025-0744 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2025
NCSC-2025-0112 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Apr 8, 2025
MSRC-CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability Microsoft Security Response Center · Apr 8, 2025

References

Windows Secure Channel Elevation of Privilege Vulnerability vendor-advisory patch