Microsoft Windows Device Association Broker Service Privilege Escalation Vulnerability

A vulnerability allowing untrusted pointer dereference in the Windows Device Association Broker service has been identified. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects several different versions and ranges of Windows 11 and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from Medium Integrity Level to Local Service.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. For more information, see the Microsoft Knowledge Base article KB5066835.