Microsoft Windows Win32K ICOMP Privilege Escalation Vulnerability

A type confusion vulnerability has been identified in the Windows Win32K component, specifically within ICOMP. This vulnerability allows an authorized attacker to elevate privileges locally. The issue arises from the access of resources using incompatible types, leading to potential unauthorized access or manipulation of system privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5063875 for Windows 11 (various versions and architectures) or KB5063899 for Windows Server 2022, 23H2 Edition (Server Core installation) to address this vulnerability.