Critical Windows Kernel Flaw Lets Attackers Gain SYSTEM Rights

The content discusses a critical security vulnerability in Windows, identified as CVE-2026-40369, which allows attackers to escalate local privileges via an exploit in the Windows Kernel. This vulnerability enables unauthorized users to gain limited SYSTEM privileges, compromising the security of affected systems, particularly Windows 11 versions 24H2 through 25H2. The vulnerability arises from unsafe memory writes triggered by an untrusted pointer dereference when the NtQuerySystemInformation function is called.

A proof-of-concept exploit code has been publicly released, increasing the risk of exploitation. Microsoft has issued a fix that should be applied immediately, and organizations are advised to monitor kernel-mode write activities as a preventive measure against local elevation attacks.