Microsoft Windows Management Services Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in Windows Management Services, allowing an authorized attacker to locally elevate privileges. This vulnerability arises from a race condition that exploitation could change the scope of the attack, enabling the execution of code or access to resources at a higher integrity level.

Impact

Successful exploitation allows an attacker to elevate privileges from a low integrity level in a sandboxed environment to a medium integrity level, gaining access to additional resources and capabilities.

Remediation

Users can apply the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, and KB5073723.