Aleksandr Koshelev

**Name of the Vulnerable Software and Affected Versions** Windows Kernel Streaming WOW Thunk Service Driver versions prior to a patch released in September 2025 **Description** A heap-based buffer overflow exists in the Windows Kernel Streaming WOW Thunk Service Driver (`ksthunk.sys`). This issue allows an authorized attacker to elevate privileges locally, potentially gaining SYSTEM-level access. The vulnerability is related to a buffer overflow in dynamically allocated memory within the driver. Exploitation of this issue can allow an attacker to affect the system. **Recommendations** Apply the patch released in September 2025 to address the vulnerability.