This vulnerability arises from a flaw in how the Endpoint Privilege Management (Windows Deployment) support utility interacts with the agent's tamper protection mechanisms. Specifically, the protections designed to safeguard the utility process may fail under certain conditions, leading to a potential bypass of tamper protection controls. The CVSS 4.0 vector indicates local attack vector with low complexity, requiring privileged access, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is provided, and no exploits are known in the wild.

If exploited, this vulnerability could allow an attacker with local privileged access to bypass tamper protection controls on the utility process, potentially enabling unauthorized modifications or actions that the protection mechanisms are intended to prevent. This could compromise the integrity and availability of the affected system components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigation steps are provided in the available data.