Microsoft Windows Elevation of Privilege Vulnerability in NtQueryInformation Token Function

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in the NtQueryInformation Token function, as defined in ntifs.h. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from a race condition that can be exploited to gain unauthorized access to elevated privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This security update is available through the Microsoft Update Catalog.