Microsoft Windows Management Services Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in Windows Management Services, allowing an authorized attacker to locally elevate privileges. This vulnerability arises from a race condition that can be exploited to change the execution scope, enabling an attacker to gain higher privileges within a contained AppContainer environment.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from a low integrity level in a sandboxed execution environment to a medium integrity level, accessing resources or executing code with greater permissions.

Remediation

Users can apply the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, and KB5073723.