A critical use after free vulnerability in Windows Message Queuing allows unauthenticated remote code execution, posing a severe risk to system integrity and confidentiality.

This is a use after free flaw (CWE-416) within the Windows Message Queuing component. An unauthenticated attacker can trigger this condition over a network to achieve remote code execution without requiring user interaction.

The vulnerability carries a CVSS score of 9.8, reflecting its critical severity due to the lack of required authentication or user interaction. Successful exploitation grants an attacker full control over the affected system, which may result in complete data compromise, unauthorized lateral movement within the network, and significant operational disruption.

Immediate Action: Apply the security updates provided by Microsoft for the respective Windows versions listed above to resolve the use after free condition.

Proactive Monitoring: Monitor network traffic for unusual activity directed at the Message Queuing service ports and review system event logs for unexpected service crashes or anomalies.

Compensating Controls: Ensure that the Windows Message Queuing service is disabled if it is not required for business operations, and restrict network access to this service via host-based or network firewalls.

Public Exploit Available: Unknown.

Given the critical nature of this remote code execution vulnerability and the lack of required user interaction, immediate patching is essential. Organizations should prioritize the deployment of the vendor-supplied updates across all affected Windows environments to eliminate the risk of exploitation.