Microsoft Windows Smart Card Double Free Vulnerability Leading to Privilege Escalation

A double free vulnerability has been identified in the Windows Smart Card component, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple Windows versions, including various editions of Windows Server, Windows 10, and Windows 11. The issue arises from improper memory management, which could be exploited to gain higher system privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the November 2025 security update rollout. Instructions for downloading this security update are available through the Microsoft Update Catalog.