Microsoft Windows WLAN Service Privilege Escalation Vulnerability

A vulnerability in the Windows WLAN Service allows an authorized attacker to externally control file names or paths, leading to local privilege escalation. This issue affects multiple Windows 10 and Windows 11 versions, as well as Windows Server 2019 and 2022. The vulnerability arises from improper handling of file names or paths, which could be exploited to gain elevated privileges on the system.

Impact

Exploitation of this vulnerability could allow an attacker to gain limited SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product update guidance.