Microsoft Brokering File System Elevation of Privilege Vulnerability

A use-after-free vulnerability has been identified in the Microsoft Brokering File System, which could allow an attacker to elevate privileges. This vulnerability affects several Microsoft products, including Windows Server 2025, Windows 11 Version 24H2 for x64-based and ARM64-based Systems, and Windows Server 2022, 23H2 Edition (Server Core installation).

Impact

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to execute code or access resources at a higher integrity level than normally permitted.

Remediation

Users can apply the security update KB5050009 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the security update KB5049984 should be applied.