CVE-2026-25171
HIGHCVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2Tags
Description
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
Analysis
Privilege escalation in Windows Authentication Methods (Windows 10 22H2, Windows 11 26H1) stems from a use-after-free memory vulnerability that allows authenticated local attackers to gain elevated system privileges. The flaw requires low user privileges and manual interaction but provides complete system compromise through code execution. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify and inventory all affected Windows systems running vulnerable authentication methods; disable non-essential authentication methods where operationally feasible. Within 7 days: Implement enhanced monitoring for suspicious authentication and privilege escalation attempts; restrict local admin access to critical systems. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today