Product:
Windows Virtualization-Based Security
Summary
Untrusted pointer dereference in Windows Virtualization-Based Security Enclave allows an authorized attacker to bypass a security feature locally. This vulnerability can lead to significant security risks if exploited. It is crucial for users to understand the implications of this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.7 | CVE-2026-23670 |
Exploitation
To exploit this vulnerability, an attacker with high privileges must gain access to the system locally. By manipulating the untrusted pointer, the attacker can bypass the security feature of the VBS Enclave, potentially leading to unauthorized access to sensitive information or system controls.
Affected Products
- Windows Virtualization-Based Security: Vulnerable to untrusted pointer dereference, allowing local attackers to bypass security features.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are regularly updated and monitor for any security advisories related to this issue.