An authenticated local attacker can leverage a flaw in the Microsoft Windows SMB Server to achieve full privilege escalation on the affected host.

This vulnerability involves improper authentication within the SMB Server component (CWE-287), which allows a locally authenticated attacker to bypass standard permission checks and escalate privileges to the system level.

The ability for a standard user to escalate privileges to the system level poses a severe risk to organizational security, as it facilitates full control over the compromised host. With a CVSS score of 7.8, this vulnerability is classified as High severity, enabling lateral movement, data exfiltration, and the potential for a complete compromise of the affected workstation or server.

Immediate Action: Administrators must apply the latest security patches provided in the Microsoft Update Guide to all affected Windows versions immediately.

Proactive Monitoring: Security teams should monitor system logs for unusual process execution patterns or unauthorized attempts to access sensitive system files by standard user accounts.

Compensating Controls: Ensure that strict principle of least privilege policies are enforced on all workstations to minimize the number of users capable of executing local code.

Public Exploit Available: Yes, a public proof-of-concept repository is available on GitHub.

Given the High severity of this privilege escalation flaw and the availability of a public proof-of-concept, the urgency to patch is significant. Organizations should prioritize the deployment of the vendor provided updates to all identified Windows instances to prevent potential local exploitation and subsequent system compromise.