Microsoft Windows Local Security Authority Privilege Escalation Vulnerability

A time-of-check time-of-use (TOCTOU) race condition has been identified in the Windows Local Security Authority (LSA). This vulnerability allows an authorized attacker to elevate privileges locally. The issue arises from the nature of the race condition, where the timing of events can be manipulated to gain unauthorized access to higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Security updates addressing this vulnerability are available for various Windows versions, including Windows 10, Windows Server 2012, Windows Server 2008 R2, Windows Server 2016, and Windows 11. Specific update details can be found in the Microsoft Knowledge Base articles referenced in the security update guide.