Microsoft Windows QoS Scheduler Privilege Escalation Vulnerability

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in the Microsoft Windows Quality of Service (QoS) scheduler. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from a race condition, where the timing of events can be manipulated to create unintended consequences, potentially leading to unauthorized access or control.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5062552 for Windows 11, KB5062554 for Windows 10, and various KBs for different Windows Server versions. These security updates are available through the Microsoft Update Catalog.