Microsoft Windows Shell Numeric Truncation Error Vulnerability Allowing Privilege Escalation

A numeric truncation error vulnerability has been identified in Windows Shell. This vulnerability allows an authorized attacker to locally elevate privileges. It affects multiple Windows 10 and Windows 11 versions, as well as Windows Server 2022, 2025, and several 2008 and 2016 Server versions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5062553, KB5062552, KB5062572, KB5062624, KB5062618, KB5062560, and KB5062554.