Microsoft Windows MBT Transport Driver Privilege Escalation Vulnerability

A vulnerability allowing untrusted pointer dereference in the Windows MBT Transport driver has been identified. This flaw enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple versions of Windows Server, including 2012 R2, 2008 R2, and 2008, across various installation types such as Server Core and standard installations.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates released in July 2025. For specific update details, refer to the Microsoft Update Catalog.