Microsoft PowerToys Improper Authorization Vulnerability Allowing Privilege Elevation

A vulnerability in Microsoft PowerToys has been identified, allowing an authorized attacker to improperly elevate privileges locally. This issue arises from inadequate authorization mechanisms within the application.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for Microsoft PowerToys version 0.99.1 from the GitHub releases page.