Microsoft Windows Digital Media Elevation of Privilege Vulnerability

A vulnerability allowing elevation of privilege has been identified in Windows Digital Media. This issue affects several versions of Windows Server and Windows 10, as well as Windows 11 and Windows Server 2022. The vulnerability arises from an out-of-bounds read, which could be exploited to gain SYSTEM privileges, particularly by an attacker with physical access to the device.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privilege, allowing an attacker to gain SYSTEM rights on the affected machine.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5050009, KB5050013, KB5049993, KB5050063, KB5050004, KB5050048, KB5049984, and KB5050049.