A high-severity file access vulnerability in Microsoft PC Manager allows authenticated local users to escalate privileges, necessitating immediate software updates.

This vulnerability involves improper link resolution (CWE-59), commonly known as link following. An authenticated attacker can exploit this to perform unauthorized file operations, facilitating local privilege escalation.

Exploitation of this vulnerability allows a local user to bypass security restrictions, potentially gaining control over the system. This could lead to sensitive data exposure or complete system takeover. With a CVSS score of 8.8, the threat to local system security is substantial.

Immediate Action: Update Microsoft PC Manager to version 3.22.1.0 or later as soon as possible.

Proactive Monitoring: Monitor for unexpected file system activity or attempts to manipulate symbolic links by non-privileged user accounts.

Compensating Controls: Apply the principle of least privilege by restricting user access to sensitive directories and limiting the ability to create symbolic links.

Public Exploit Available: No

Users and administrators should ensure that Microsoft PC Manager is updated to the latest version to address this privilege escalation risk. Failure to update leaves the system exposed to local attackers capable of exploiting file system link resolution flaws.