Microsoft Windows Installer Privilege Escalation Vulnerability

A vulnerability in Windows Installer has been identified, allowing an authorized attacker to elevate privileges locally. This issue arises from improper link resolution before file access, a flaw known as 'link following'.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5060998, KB5060999, KB5060525, KB5060526, KB5060531, KB5061010, and KB5060841.