A double free vulnerability in the Windows Projected File System allows an authenticated local attacker to elevate privileges, posing a significant risk to system integrity.

This vulnerability is a double free (CWE-415) within the Windows Projected File System driver. It requires an attacker to have local access and low-level privileges to trigger the flaw.

Successful exploitation of this vulnerability allows an attacker to escalate privileges to the level of the system or kernel. This poses a severe risk to organizational security, as it grants unauthorized control over the operating system, potentially leading to total system compromise, data theft, and the installation of persistent malicious software. With a CVSS score of 7.8, the vulnerability is classified as High severity.

Immediate Action: Apply the official security updates provided by Microsoft in the security update guide to patch the affected Windows versions.

Proactive Monitoring: Monitor system logs for unusual process execution or attempts to access restricted file system components that might indicate an exploitation attempt.

Compensating Controls: Ensure that account access policies are strictly enforced to limit the number of users with local access to sensitive systems.

Public Exploit Available: Unknown

Given the potential for full system compromise, administrators should prioritize the deployment of the vendor-supplied patches across all identified Windows environments. The requirement for local access does not diminish the urgency, as this vulnerability provides a critical path for an attacker who has already gained an initial foothold in the environment.