Microsoft Windows Elevation of Privilege Vulnerability in Remote Procedure Call Interface

An elevation of privilege vulnerability has been identified in the Windows Remote Procedure Call (RPC) Interface Definition Language (IDL). This vulnerability allows an attacker to create, modify, or delete files with the same privileges as the 'NT AUTHORITY\SYSTEM' account. The issue arises from a double free error, which can be exploited under certain conditions.

Impact

Successful exploitation of this vulnerability could allow an attacker to gain elevated privileges, enabling them to execute actions or access resources that are normally restricted.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product-specific sections.