Microsoft Graphics Kernel Local Code Execution Vulnerability

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in the Graphics Kernel. This vulnerability allows an authorized attacker to execute code locally. The issue arises from a race condition where the timing of events can be manipulated, potentially leading to unauthorized actions or changes.

Impact

Exploitation of this vulnerability allows for local code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065429, KB5065432, KB5065428, and KB5065431.