Microsoft Windows NTFS Privilege Escalation Vulnerability

A use-after-free vulnerability in Windows NTFS has been identified, allowing an unauthorized attacker to elevate privileges locally. This vulnerability arises from improper memory management, which can be exploited to gain higher-level access rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the security update KB5066780 can be applied.