Windows CNG Key Isolation Serviceの権限昇格の脆弱性
Summary
Windows CNG Key Isolation Serviceのメモリの扱いに問題があり、攻撃者が権限を昇格させて特権のあるプロセスを実行できるおそれがあります。影響を受けるのはWindows 10 Version 1607・1809・21H2・22H2、Windows 11 Version 23H2・24H2です。各版の修正版が公開されているので、Windows Updateで適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Windows CNG Key Isolation Serviceのメモリの扱いに問題があり、攻撃者が権限を昇格させて特権のあるプロセスを実行できるおそれがあります。影響を受けるのはWindows 10 Version 1607・1809・21H2・22H2、Windows 11 Version 23H2・24H2です。各版の修正版が公開されているので、Windows Updateで適用してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftWindows 10 Version 1607 |
≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688 |
10.0.14393.9688 |
| MicrosoftWindows 10 Version 1809 |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows 10 Version 21H2 |
≥ 10.0.19044.0, < 10.0.19044.7846→ 10.0.19044.7846 |
10.0.19044.7846 |
| MicrosoftWindows 10 Version 22H2 |
≥ 10.0.19045.0, < 10.0.19045.7846→ 10.0.19045.7846 |
10.0.19045.7846 |
| MicrosoftWindows 11 Version 23H2 |
≥ 10.0.22631.0, < 10.0.22631.7711→ 10.0.22631.7711 |
10.0.22631.7711 |
| MicrosoftWindows 11 Version 24H2 |
≥ 10.0.26100.0, < 10.0.26100.9974→ 10.0.26100.9974 |
10.0.26100.9974 |
| MicrosoftWindows 11 Version 25H2 |
≥ 10.0.26200.0, < 10.0.26200.9974→ 10.0.26200.9974 |
10.0.26200.9974 |
| MicrosoftWindows 11 version 26H1 |
≥ 10.0.28000.0, < 10.0.28000.3501→ 10.0.28000.3501 |
10.0.28000.3501 |
| MicrosoftWindows 11 Version 26H2 |
≥ 10.0.26300.0, < 10.0.26300.9974→ 10.0.26300.9974 |
10.0.26300.9974 |
| MicrosoftWindows Server 2016 |
≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688 |
10.0.14393.9688 |
| MicrosoftWindows Server 2016 (Server Core installation) |
≥ 10.0.14393.0, < 10.0.14393.9688→ 10.0.14393.9688 |
10.0.14393.9688 |
| MicrosoftWindows Server 2019 |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows Server 2019 (Server Core installation) |
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487 |
10.0.17763.9487 |
| MicrosoftWindows Server 2022 |
≥ 10.0.20348.0, < 10.0.20348.5870→ 10.0.20348.5870 |
10.0.20348.5870 |
| MicrosoftWindows Server 2025 |
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822 |
10.0.26100.33822 |
| MicrosoftWindows Server 2025 (Server Core installation) |
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822 |
10.0.26100.33822 |
Original description The description as published by the source.
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- web secure@microsoft.com
- web nvd.nist.gov
- web github.com