Windows 11 29617.1000 WHESVC Privilege Escalation

Windows 11 versions 26200.8457 and 29617.1000 contain a privilege-boundary issue in the Windows Health and Optimized Experiences service. The supplied proof of concept emits a Windows Diagnostics Lua ETW workflow that causes an attacker-controlled Lua module to execute as LocalSystem and writes a...

Exploit for CVE-2026-85884

WPAD LPAC / WHESVC privilege escalation https://msrc.microsof...