Microsoft Windows HTTP.sys Elevation of Privilege Vulnerability

A vulnerability allowing untrusted pointer dereference in Windows HTTP.sys has been identified, which could enable an authorized attacker to locally elevate privileges. This vulnerability affects several versions of Windows HTTP.sys.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the official fix provided by Microsoft. For guidance on the specific security update to apply, refer to the Microsoft Security Update Guide.