Microsoft Windows Server 2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*
A use-after-free vulnerability has been identified in Windows Digital Media, allowing an authorized attacker to locally elevate privileges. This vulnerability affects several versions of Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
Exploitation of this vulnerability could allow an attacker to elevate privileges from a low integrity level to a medium integrity level.
Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066793, KB5066780, KB5066835, and KB5066586.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.