Microsoft Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

A vulnerability allowing improper access control in Windows Remote Access Connection Manager has been identified. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5071546, KB5071544, KB5071503, KB5071505, KB5071542, KB5072033, KB5072014, KB5071417, and KB5071543.