Microsoft Windows TCP/IP Race Condition Vulnerability Allowing Privilege Escalation

A race condition vulnerability has been identified in the Windows TCP/IP stack, specifically within the TDI Translation Driver (tdx.sys). This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Successful exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available as part of the monthly rollup for various Windows versions. Instructions for downloading the security update can be found in the Microsoft Update Catalog.