This vulnerability (CVE-2024-43571) in Microsoft Windows 11 Version 24H2 (build 10.0.26100.0) is classified as CWE-923, indicating improper restriction of communication channels to intended endpoints. It is described as a 'Sudo for Windows Spoofing Vulnerability,' suggesting that an attacker with limited privileges could spoof communication channels, potentially leading to unauthorized access or information disclosure. The CVSS 3.1 base score is 5.6 (medium severity), with attack vector local, low attack complexity, low privileges required, and user interaction required. The impact primarily affects confidentiality (high), with limited integrity impact and no availability impact. Microsoft has issued an official fix for this vulnerability.

The vulnerability allows an attacker with limited privileges and requiring user interaction to spoof communication channels within Windows 11 Version 24H2, potentially leading to unauthorized disclosure of information (high confidentiality impact). Integrity impact is limited, and availability is not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the provided patch to affected Windows 11 Version 24H2 systems (build 10.0.26100.0) to remediate the issue. No additional mitigation steps are indicated beyond applying the official update.