Microsoft Windows Core Messaging Elevation of Privileges Vulnerability

A vulnerability allowing elevation of privileges has been identified in the Windows Core Messaging component. This issue could enable an attacker to gain SYSTEM privileges. The vulnerability affects multiple Windows versions, including Windows 10 (all versions), Windows 11 (all versions), Windows Server 2016, Windows Server 2022, and Windows Server 2025. The root cause is an untrusted pointer dereference, which could be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain SYSTEM rights.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog.