Microsoft Windows Management Services Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in Windows Management Services, allowing an authorized attacker to locally elevate privileges. This issue arises from improper handling of memory, which can be exploited to gain higher access rights.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from a low integrity level in a sandboxed AppContainer environment to a medium integrity level, enabling the execution of code or access to resources at a higher privilege.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, and KB5073723.