Microsoft Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability has been identified in the Windows Installer. This vulnerability allows an attacker to gain SYSTEM privileges. It requires user interaction, specifically a reboot, to exploit. The issue is present in multiple versions of Windows 10 and Windows 11, as well as Windows Server 2022.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain SYSTEM rights.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. For those who have deployed a policy to block the rollback of Virtualization-based Security related updates, it is necessary to redeploy using the updated policy.