Microsoft Windows Shell Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in Windows Shell, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple Windows 10 versions, Windows 11, and various Windows Server releases. The issue arises from improper memory management, which could be exploited by interacting with a malicious file.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5071543 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2025, the Security Hotpatch Update KB5072014 can also be applied.