Microsoft Windows Server Data Deduplication Privilege Escalation Vulnerability

A use-after-free vulnerability in the Data Deduplication feature of Microsoft Windows Server allows an authorized attacker to locally elevate privileges. This vulnerability affects multiple versions of Windows Server, including 2012 R2, 2016, 2019, 2022, and 2025, as well as their Server Core installations.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Updates' section.