Microsoft Windows Message Queuing Privilege Escalation Vulnerability

A vulnerability allowing improper input validation in Windows Message Queuing (MSMQ) has been identified. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple versions of Windows Server and Windows 10.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the December 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5071503, KB5071505, KB5071543, KB5071544, and KB5071546.