Microsoft Windows VBS Enclave Privilege Escalation Vulnerability

A vulnerability exists in Windows Virtualization-Based Security (VBS) Enclave due to improper handling of untrusted inputs in security decisions. This flaw allows an authorized attacker to locally elevate privileges. Successful exploitation could enable the attacker to access data from the targeted enclave or execute code within it.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights within the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For guidance on blocking the rollback of VBS-related security updates, refer to the updated policy available on the Microsoft Support website.