This vulnerability, identified as CVE-2026-42829 and categorized under CWE-284 (Improper Access Control), affects Windows 11 Version 24H2 (build 10.0.26100.0). It allows an attacker with local authorized access and low privileges to bypass Windows Administrator Protection security controls. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to address this vulnerability.

An authorized local attacker with limited privileges can bypass security features intended to protect administrator-level functions. This can lead to unauthorized access or modification of sensitive system components, potentially compromising system confidentiality, integrity, and availability.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate the issue. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42829 for detailed patch information and update instructions.