Microsoft Windows Recovery Environment Agent Elevation of Privilege Vulnerability

An elevation of privilege vulnerability has been identified in the Windows Recovery Environment Agent. This vulnerability allows an attacker with physical access to a device to gain elevated privileges, potentially leading to unauthorized actions or access within the system.

Impact

Exploitation of this vulnerability could allow an attacker to gain elevated privileges on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5049981, KB5050021, KB5049983, KB5050008, KB5050009, and KB5049984.