Microsoft Windows 11
cpe:2.3:o:microsoft:windows_11:*:*:*:*:*:*:*
A use-after-free vulnerability has been identified in Windows Digital Media, allowing an authorized attacker to locally elevate privileges. This vulnerability affects several versions of Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
Exploitation of this vulnerability could allow an attacker to elevate privileges from a low integrity level to a medium integrity level.
Users can download the security update for this vulnerability via the Microsoft Update Catalog. Security update KB5066835 addresses this vulnerability on Windows 10, Windows 11, and Windows Server 2025. For Windows Server 2022 and Windows Server 2019, security update KB5066586 is available.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.