A high-severity privilege escalation vulnerability exists in the Microsoft Brokering File System, potentially allowing local attackers to gain unauthorized administrative access.

This flaw is a use-after-free condition within the Brokering File System, involving race conditions during concurrent execution. It requires the attacker to have low-level local access to the system to trigger the escalation.

The vulnerability carries a CVSS score of 7.8, indicating a high risk of complete system compromise. Successful exploitation allows an attacker to elevate privileges from a standard user to a higher-privileged state, potentially leading to full control over the operating system, persistent unauthorized access, and the bypass of security boundaries.

Immediate Action: Apply the latest security updates provided by Microsoft for the affected Windows versions to patch the Brokering File System.

Proactive Monitoring: Monitor system logs for unusual process creation or unauthorized attempts to access sensitive file system components.

Compensating Controls: Ensure robust endpoint detection and response (EDR) solutions are active to identify and block suspicious local process behavior associated with privilege escalation attempts.

Public Exploit Available: No

Given the potential for full privilege escalation and the high CVSS severity, organizations should prioritize the deployment of the vendor-supplied security patches. While local access is required, this vulnerability represents a significant threat to internal security if a malicious actor gains a foothold on a workstation or server.