Microsoft Graphics Component Privilege Escalation Vulnerability

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been identified in the Microsoft Graphics Component. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from a race condition that exploitation takes advantage of, requiring the attacker to successfully navigate the timing of events to gain elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835 for various Windows 11 versions and Windows Server 2025, and KB5066782 for Windows Server 2022.