Microsoft Windows COM Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability has been identified in the Windows Component Object Model (COM) that allows an authorized attacker to elevate privileges locally. This vulnerability affects several versions of Windows, including various releases of Windows 10, Windows 11, Windows Server 2022, and other server versions. The vulnerability arises from a heap-based buffer overflow, which can be exploited to gain higher privileges, potentially reaching SYSTEM level.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights on the affected system.

Remediation

Users can apply the security update KB5066791 for Windows 10, KB5066793 for Windows 11, and KB5066782 for Windows Server 2022. For other affected Windows Server versions, the corresponding security update can be found through the Microsoft Update Catalog.