A double free vulnerability in the Windows Projected File System enables local attackers with authorized access to escalate their privileges to a higher level.

This is a memory management flaw categorized as a double free (CWE-415). An attacker who has already gained local access to the system can trigger this condition to manipulate memory and elevate privileges.

Successful exploitation of this vulnerability results in full local privilege escalation, granting an attacker the ability to execute code or perform actions with elevated permissions. Given the CVSS score of 7.8, this represents a high risk, as it allows a standard user to bypass security controls and potentially gain complete control over the compromised workstation or server.

Immediate Action: Apply the latest security updates provided by Microsoft in the official update guide to address this flaw.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected privilege changes associated with local user accounts.

Compensating Controls: Ensure the principle of least privilege is strictly enforced, limiting the number of users who possess local interactive login capabilities.

Public Exploit Available: No

Due to the severity of local privilege escalation, organizations must prioritize the deployment of the vendor provided security updates. Administrators should verify that all affected Windows systems are patched to the latest version to eliminate the underlying memory management defect.