Product:
NtQueryInformation Token
Summary
A time-of-check time-of-use race condition in the NtQueryInformation Token function allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-55696 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the timing of operations to gain elevated privileges. By executing a carefully timed sequence of actions, the attacker can take advantage of the race condition, allowing them to perform unauthorized actions on the system.
Affected Products
- NtQueryInformation Token: A function that retrieves information about a specified access token, which can be exploited to gain elevated privileges.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also review their access controls and limit local access to sensitive systems to reduce the risk of exploitation.