December 2025

Finlay Richardson
15 Dec 2025

Local Privilege Escalation via Vulnerable USB Co-Installers

We describe a new USB co-installer vulnerability, allowing elevation of privileges on Windows systems. This post describes previous co-installer vulnerabilities, and our research methodology, and why peripherals can be a novel source of vulnerabilities in operating systems.