Microsoft Windows VBS Enclave Privilege Escalation Vulnerability

A vulnerability allowing untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave has been identified. This flaw enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple versions of Windows 11, including ARM64 and x64-based systems.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain Virtual Trust Level 1 (VTL1) privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5074109 and KB5073455.