This vulnerability, identified as CWE-428, involves an unquoted search path or element in Windows Setup and Deployment on Windows 11 Version 24H2 (build 10.0.26100.0). The flaw allows elevation of privilege by exploiting how the system searches for executables or resources without properly quoting paths, potentially enabling an attacker with local access and limited privileges to execute arbitrary code with elevated privileges. The CVSS 3.1 base score is 7.8, indicating high severity. Microsoft has published an official fix to address this issue.

Successful exploitation could result in an attacker with limited privileges gaining elevated privileges, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability, all rated high impact according to the CVSS vector. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43457 to remediate this vulnerability.