Microsoft Windows Connected Devices Platform Service Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Windows Connected Devices Platform Service, allowing an authorized attacker to elevate privileges locally. This issue arises from improper synchronization in concurrent execution using shared resources.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This security update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the security update KB5066780 can be applied.