CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

...

CVE-2025-55696

CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...

Microsoft NtQueryInformation Token 安全漏洞

Microsoft NtQueryInformation Token is an API function from Microsoft Corporation USA. A security vulnerability exists in Microsoft NtQueryInformation Token, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...