Microsoft Windows Hyper-V Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability has been identified in Windows Hyper-V. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises when a crafted VHDX file is processed, potentially leading to unauthorized access to SYSTEM privileges.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to gain elevated privileges, specifically SYSTEM rights, on the affected system.

Reproduction

To reproduce this vulnerability, an authenticated attacker can create a malicious VHDX file and use it as an argument in a call to the VHDMP API. This process takes advantage of the heap-based buffer overflow, leading to unauthorized privilege escalation.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5063871, KB5063889, KB5063906, KB5063950, and KB5064010.