CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

...

CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

...

CVE-2025-55696

CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...

CVE-2025-55696: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

Microsoft NtQueryInformation Token security vulnerability

Microsoft NtQueryInformation Token is an API function from Microsoft Corporation USA. A security vulnerability exists in Microsoft NtQueryInformation Token, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...