OS-WINDOWS Microsoft Windows Search Service elevation of privilege attempt

IPS-CFWIPS-SWG

3 SIDs: 62642, 64448, 66247

Description

Detects an attempt to exploit CVE-2025-21292 and CVE-2026-27909, a privilege escalation flaw that can grant higher access in Microsoft Windows Search Service.

CVEs

CVE-2025-21292 CVE-2026-27909 CVE-2023-36394

Related malware families

Microsoft

References

msrc.microsoft.com
msrc.microsoft.com