NetSight
high7.0

CVE-2026-25184

Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized…

Impact

Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 23h2
before 10.0.22631.6936
MicrosoftWindows 11 24h2
before 10.0.26100.8246
MicrosoftWindows 11 25h2
before 10.0.26200.8246
MicrosoftWindows 11 26h1
before 10.0.28000.1836
MicrosoftWindows Server 2022 23h2
before 10.0.25398.2274
MicrosoftWindows Server 2025
before 10.0.26100.32690

Weakness classification

References