Microsoft Windows Server Update Service Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in Windows Server Update Service (WSUS), allowing an authorized attacker to locally elevate privileges. This vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. For Windows 11 version 26H1 on x64-based and ARM64-based systems, the security update is KB5083768.