CVE-2026-97800: CWE-732: Incorrect Permission Assignment for Critical Resource in Microsoft Windows 11 Version 24H2

This vulnerability (CVE-2026-97800) is due to incorrect permission assignment for a critical resource in the Windows Mobile Broadband component of Microsoft Windows 11 Version 24H2. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. The vulnerability affects multiple builds of Windows 11 Version 24H2 as specified by the affected version ranges. Microsoft has published an official fix to address this issue.

An authorized local attacker can elevate privileges, potentially gaining full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability with high impact levels. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97800 to remediate this vulnerability.