Microsoft Brokering File System Null Pointer Dereference Vulnerability Allowing Privilege Escalation

A null pointer dereference vulnerability has been identified in the Microsoft Brokering File System. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from improper handling of null pointers, which could be exploited to gain higher system privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5062553 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the relevant update is KB5062570.