CVE-2026-25184

published 2026-04-14

CVE-2026-25184: Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized…

high 7 CVSS 3.1

AV L AC H PR L UI N S U C H I H A H

Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate privileges locally.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
microsoft	windows_11_23h2	< 10.0.22631.6936	10.0.22631.6936
microsoft	windows_11_24h2	< 10.0.26100.8246	10.0.26100.8246
microsoft	windows_11_25h2	< 10.0.26200.8246	10.0.26200.8246
microsoft	windows_11_26h1	< 10.0.28000.1836	10.0.28000.1836
microsoft	windows_11_version_22h3	>= 10.0.22631.0 < 10.0.22631.6936	10.0.22631.6936
microsoft	windows_11_version_23h2	>= 10.0.22631.0 < 10.0.22631.6936	10.0.22631.6936
microsoft	windows_11_version_24h2	>= 10.0.26100.0 < 10.0.26100.8246	10.0.26100.8246
microsoft	windows_11_version_25h2	>= 10.0.26200.0 < 10.0.26200.8246	10.0.26200.8246
microsoft	windows_11_version_26h1	>= 10.0.28000.0 < 10.0.28000.1836	10.0.28000.1836
microsoft	windows_server_2022_23h2	< 10.0.25398.2274	10.0.25398.2274
microsoft	windows_server_2025	< 10.0.26100.32690	10.0.26100.32690
microsoft	windows_server_2025	>= 10.0.26100.0 < 10.0.26100.32690	10.0.26100.32690

CWE-362