Microsoft Windows UI XAML Phone DatePickerFlyout Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Windows UI XAML Phone DatePickerFlyout component. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from improper memory management, which can be exploited to gain unauthorized access to elevated rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a standard user to gain elevated rights and potentially disrupt system stability by causing crashes.

Remediation

Users can apply the security update KB5065427 to address this vulnerability. This security update is available through the Microsoft Update Catalog.