Microsoft Windows Digital Media Privilege Elevation Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in Windows Digital Media, allowing an authorized attacker to locally elevate privileges. This vulnerability affects several versions of Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from a low integrity level to a medium integrity level.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Security update KB5066835 addresses this vulnerability on Windows 10, Windows 11, and Windows Server 2025. For Windows Server 2022 and Windows Server 2019, security update KB5066586 is available.

Added: Oct 14, 2025, 5:23 PM
Updated: Oct 14, 2025, 10:05 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
1.3
exploitability
3.3
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.