Microsoft Windows Digital Media Elevation of Privilege Vulnerability

A vulnerability allowing elevation of privilege has been identified in Windows Digital Media. This issue affects several versions of Windows, including Windows 10, Windows 11, Windows Server 2019, and Windows Server 2022. The vulnerability arises from an out-of-bounds read, which could be exploited by an attacker with physical access to the device, potentially leading to SYSTEM privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain elevated privileges, specifically SYSTEM rights.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5049981, KB5049983, KB5050008, KB5050021, KB5050048, and KB5050009.