Microsoft Windows KDC Proxy Service Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in the Windows KDC Proxy Service (KPSSVC), allowing an unauthorized attacker to execute code remotely over the network. This vulnerability arises from a race condition that exploitation requires.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5061018, KB5061059, KB5061010, KB5060842, KB5060118, KB5060526, and KB5060531.