Windows Server 2012 EUVD-2026-22467

Local user account required on target system. Race condition requires precise timing during TCP/IP packet processing. Attack succeeds only under specific concurrent network connection patterns.

Real-world risk assessment reveals moderate-to-high concern balanced by exploitation constraints. The CVSS 7.0 score reflects high impact (C:H/I:H/A:H-full system compromise) but elevated exploitation barriers: local access required (AV:L), high attack complexity (AC:H), and low-privilege authentication needed (PR:L). High complexity (AC:H) in race conditions typically indicates narrow timing windows requiring specialized knowledge or repeated attempts, which limits casual exploitation but not determined attackers. The authentication requirement (PR:L) means attackers need existing foothold as standard users-common in lateral movement scenarios or insider threats, but preventing unauthenticated remote attacks. No EPSS score provided, but historical Windows TCP/IP vulnerabilities average 15-30% exploitation probability when patches exist. The vulnerability is not confirmed actively exploited (no CISA KEV listing), and no public exploit identified at time of analysis, suggesting discovery through proactive security research rather than incident response. The expansive affected product matrix (21 distinct version ranges per EUVD data) creates significant attack surface in enterprise environments with mixed Windows estates. SSVC decision points: Exploitation=none (reducing urgency), Automatable=no (race conditions resist automation), Technical Impact=total (kernel-level compromise). Priority classification: Medium-High-not an emergency requiring out-of-band patching, but warranting inclusion in next scheduled maintenance window given privilege escalation potential and ubiquitous platform presence.

An authenticated local user repeatedly initiates concurrent TCP/IP connections while monitoring timing windows. By exploiting race conditions in shared resource synchronization, the attacker gains system-level execution capabilities without administrative credentials.