Microsoft Windows Runtime Privilege Elevation Vulnerability

A use-after-free vulnerability has been identified in Windows Runtime, allowing an authorized attacker to locally elevate privileges. This vulnerability affects several versions of Windows 10, Windows 11, and Windows Server 2019 and 2025. The issue arises from improper memory management, which could be exploited to gain higher privileges, potentially up to SYSTEM level.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights and access sensitive system resources or functions.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked within the security update guide.