Microsoft Graphics Component Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Microsoft Graphics Component, allowing an authorized attacker to locally elevate privileges. This issue arises from concurrent execution using shared resources without proper synchronization.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, available through the Microsoft Update Catalog. For Windows Server 2025 and Windows 11 Version 24H2 (both x64-based and ARM64-based systems), the security update can be downloaded using the KB5065426 or KB5065474 links. Windows Server 2025 (Server Core installation) users can also use the same KB links for the security update.