This vulnerability involves improper access control within the Windows Virtualization-Based Security (VBS) Enclave in Windows 11 Version 24H2 (build 10.0.26100.0). An attacker with authorized local access and high privileges can bypass certain security features due to this flaw. The CVSS 3.1 vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, no availability impact, and official remediation level with confirmed fix. Microsoft has published an official fix for this vulnerability.

An authorized attacker with high privileges on the affected Windows 11 system can bypass security features implemented by the VBS Enclave, potentially leading to unauthorized actions that compromise system integrity. There is no impact on confidentiality or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32220 to remediate this vulnerability.