Microsoft Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

A vulnerability allowing improper access control in Windows Remote Access Connection Manager has been identified. This issue enables an authorized attacker to locally elevate privileges. Exploitation of this vulnerability could allow the attacker to gain SYSTEM privileges.

Impact

Exploitation of this vulnerability leads to unauthorized privilege escalation, allowing an attacker to gain elevated rights on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835, KB5066836, KB5066837, and KB5066873.