Microsoft Digest Authentication Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Digest Authentication. This issue arises from a race condition that creates a use-after-free scenario, allowing attackers to execute arbitrary code on the affected system. The vulnerability is present in several versions of Windows Server and Windows 10, as well as in Windows 11 and Windows Server 2022.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, connect to a system that requires digest authentication. The exploitation involves triggering the race condition to create a use-after-free scenario, which can then be leveraged to execute arbitrary code.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog.