Microsoft Windows Projected File System Elevation of Privilege Vulnerability

A buffer over-read vulnerability has been identified in the Windows Projected File System. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from improper handling of memory, which could be exploited to gain higher-level permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5071546, KB5072033, KB5072014, and KB5071417.