Microsoft Streaming Service Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability has been identified in Microsoft Streaming Service. This vulnerability allows an authorized attacker to locally elevate privileges. It affects several Windows products, including Windows Server 2016, Windows 10 Version 1607, Windows Server 2025, Windows 11 Version 24H2, and Windows Server 2022, 23H2 Edition.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates provided in KB5053594, KB5053618, KB5053598, KB5053636, and KB5053599 to address this vulnerability.