Microsoft Windows UI Automation Manager Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the UI Automation Manager (uiamanager.dll) of Microsoft Windows. This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Successful exploitation of this vulnerability allows an attacker to elevate privileges from a low integrity level to a medium integrity level.

Remediation

Users can apply the security update KB5095051 to address this vulnerability. This security update is available through the Microsoft Update Catalog. For Windows Server 2025, the security update KB5094125 can be applied. For Windows Server 2022, the security update KB5094128 is available.