Microsoft Windows Privilege Escalation Vulnerability in Capability Access Management Service

A race condition vulnerability has been identified in the Capability Access Management Service (camsvc) on various Microsoft Windows platforms. This vulnerability allows an unauthorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5062552 for Windows 11 Version 22H2, KB5062554 for Windows 10 Version 22H2, KB5062572 for Windows Server 2022, KB5062557 for Windows Server 2019, and KB5062553 for Windows Server 2025. These security updates are available through the Microsoft Update Catalog.