Microsoft Winlogon Elevation of Privilege Vulnerability

A vulnerability in Winlogon has been identified, allowing an authorized attacker to locally elevate privileges. This issue arises from improper link resolution before file access, a flaw known as 'link following'.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094121, KB5094122, KB5094123, KB5094125, KB5094126, KB5094127, KB5094128, and KB5094041.