Microsoft PC Manager Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability in Microsoft PC Manager has been identified, allowing an authorized attacker to locally elevate privileges. This issue arises from improper access control, which could enable exploitation by users with certain permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5062553 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the relevant update is KB5062570.