Microsoft Azure Local Privilege Escalation Vulnerability

A vulnerability allowing local privilege escalation has been identified in Azure Local. This issue arises from improper input validation, which could enable an authorized attacker to elevate privileges within the affected environment.

Impact

Exploitation of this vulnerability could allow an authorized attacker to load a non-Microsoft DLL into an enclave, potentially leading to code execution within the context of the target enclave.

Remediation

Security updates for this vulnerability are available for Windows 10 (both x64-based and 32-bit systems) as of April 9, 2025. For Azure Stack HCI, security updates are available for both the 23H2 and 22H2 versions.