Microsoft Windows Graphics Component Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Microsoft Graphics Component, allowing an authorized attacker to locally elevate privileges. This vulnerability arises from a race condition that can be exploited under certain conditions.

Impact

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, available through the Microsoft Update Catalog. For Windows Server 2025 and Windows 11 Version 24H2 (both x64-based and ARM64-based systems), the security update can be downloaded using the KB5065426 or KB5065474 links. Windows Server 2025 (Server Core installation) users can also use these KB links for the security update.