cve-2026-42829

CVE-2026-42829 is a Microsoft Windows Administrator Protection security feature bypass vulnerability disclosed in June 2026. It affects Windows 11 versions 24H2, 25H2, and 26H1, with fixes in KB5094126 and KB5095051. The vulnerability allows an attacker to bypass the privilege boundary that prevents user-context code from gaining administrator-level access. While not a remote-code-execution flaw and considered less likely to be exploited, it raises questions about the reliability of Windows' newest privilege boundary. Discussions on WindowsForum cover the technical details, impact, and implications for enterprise security.