Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_11_23h2 | - | 10.0.22631.6649 |
| microsoft / windows_11_24h2 | - | 10.0.26100.7781 |
| microsoft / windows_11_25h2 | - | 10.0.26200.7781 |
| microsoft / windows_server_2022_23h2 | - | 10.0.25398.2149 |
| microsoft / windows_server_2025 | - | 10.0.26100.32313 |