Microsoft Windows Elevation of Privilege Vulnerability in PPP EAP-TLS

A use-after-free vulnerability has been identified in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS implementation on Microsoft Windows. This vulnerability allows an authorized attacker to elevate privileges locally. The issue arises from improper memory management, leading to a use-after-free condition that can be exploited to gain elevated privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5063709, KB5063875, KB5063880, KB5063812, and KB5063950.