At the 2026 USENIX Security Symposium, researchers from the University of Birmingham and Durham University detailed three Windows flaws, including one dubbed “Download More RAM.” The vulnerabilities allow malicious actors to bypass Windows 11 security and gain system privileges without physical access, according to the original report.
The “Download More RAM” flaw exploits a lack of write protection, giving attackers a path to elevate privileges on a targeted machine. Once system privileges are obtained, attackers can install malware remotely, steal data, or take full control of the system. The researchers did not disclose a proof-of-concept exploit in their presentation, but the implications are clear for any Windows 11 user.
What the Researchers Found
The team identified three distinct flaws that undercut Windows 11’s security model. The “Download More RAM” vulnerability stands out because it requires no physical access. Attackers can trigger the issue over a network or through a malicious document, potentially gaining SYSTEM-level access. This is not a theoretical concern; the researchers demonstrated the bypass during their talk.
Windows 11 marketed itself as the most secure version of Windows, but this research shows that write protection gaps still exist. The researchers noted the flaws were present in fully updated systems at the time of disclosure.
Why Windows 11 Users Should Pay Attention
For gamers and everyday users, the risk is real. A compromised machine could lead to stolen accounts, ransomware, or crypto miners running silently. The fact that no physical access is needed makes these flaws particularly dangerous in shared networks or public Wi-Fi scenarios. While Microsoft has not yet commented on a fix, users should keep an eye on Windows Update for security patches.
This isn’t the first time Windows security has come under scrutiny. Older discussions around Microsoft security show that even built-in protections have faced challenges. The new findings add to the list of reasons to stay vigilant.
GamerHeadlines Takeaway
Windows 11 remains the most popular OS for PC gaming, and any privilege escalation flaw is a direct threat to player accounts and game libraries. Until Microsoft releases a patch, users should avoid opening suspicious attachments and consider using a separate user account without admin rights for daily tasks. The research underscores that security is an ongoing process, not a one-time fix.
