Microsoft Windows Performance Monitor Integer Underflow Vulnerability Leading to Remote Code Execution

An integer underflow vulnerability has been identified in Windows Performance Monitor. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability arises from improper handling of integer values, which can be exploited to manipulate the execution flow and execute arbitrary code.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094125, KB5094126, KB5094128, and KB5093998.