Microsoft Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability

A vulnerability allowing improper link resolution before file access has been identified in the Windows Health and Optimized Experiences Service. This flaw enables an authorized attacker to locally elevate privileges. The issue arises from inadequate handling of file links, which could be exploited to gain higher access rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain administrator rights.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This update is available through the Microsoft Update Catalog.