ZDI-26-180
HIGH 8.8
Published
Mar 10, 2026
Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability
Microsoft
A local privilege escalation vulnerability in Microsoft Windows (CVE-2026-23668) allows attackers with low-level code execution to gain elevated system privileges. An attacker exploiting this flaw could gain administrative control of an affected system, posing a significant risk if combined with other attack methods. Security teams should prioritize patching Windows systems and restrict low-privileged code execution through application whitelisting and least-privilege access controls.