Microsoft Windows Shell Race Condition Vulnerability Allowing Privilege Escalation

A race condition vulnerability has been identified in Windows Shell, specifically in the File Explorer component. This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5072033 and KB5072014.