Microsoft Windows Projected File System Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Windows Projected File System, allowing an authorized attacker to locally elevate privileges. This vulnerability arises from improper memory management, which can be exploited to gain higher system privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5087544 for various Windows 10 versions, KB5087420 for Windows 11 versions, and KB5087538 for Windows Server 2019. For Windows Server 2022 and 2025, the relevant update information is also available through the Microsoft Update Catalog.