Microsoft Graphics Component Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Microsoft Graphics Component, allowing an authorized attacker to elevate privileges over a network. This vulnerability affects multiple Windows and Windows Server versions. The issue arises from improper memory management, which can be exploited to gain higher-level permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5066791 for various Windows 10 versions, KB5066793 for Windows 11, and KB5066782 for Windows Server 2022. Windows Server 2025 users should look for the KB5066835 update. For Windows Server 2019, the relevant update is KB5066586.