Microsoft Windows Server 2025 Capability Access Management Service Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Capability Access Management Service (camsvc) on Windows Server 2025 and its Server Core installation. This vulnerability allows an authorized attacker to locally elevate privileges by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. For more information, refer to the Microsoft Knowledge Base article KB5074109.