Microsoft Windows Remote Desktop Licensing Service Elevation of Privilege Vulnerability

A vulnerability exists in the Windows Remote Desktop Licensing Service due to missing authentication for critical functions. This flaw allows an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows versions, including various editions of Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain administrator rights.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082123, KB5083768, KB5082198, KB5082060, and KB5082052.