Microsoft Windows Connected Devices Platform Service Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability has been identified in the Connected Devices Platform Service (Cdpsvc) on Microsoft Windows. This vulnerability allows an authorized attacker to elevate privileges locally, potentially gaining SYSTEM privileges. The issue arises from a heap-based buffer overflow, which can be exploited to manipulate memory and execute arbitrary code with elevated rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, and KB5073723.