Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

A flaw in Windows CNG Key Isolation Service allows an authenticated attacker to gain higher system privileges by exploiting an out-of-bounds write vulnerability. This could enable unauthorized access to sensitive cryptographic keys and system resources.

An out-of-bounds write (CWE-787) in the CNG Key Isolation Service permits local privilege escalation when a low-privileged authenticated user sends specially crafted requests. Successful exploitation grants SYSTEM-level privileges, potentially compromising cryptographic material and system integrity.