Sascha Meyer

The issue is related to insufficient access control in Microsoft Windows Defender, which can be exploited to elevate privileges.

The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges. The estimated number of potentially affected devices is not provided. There are reports of real-world incidents where this issue was exploited. Technical details about exploitation include the use of the UIFuckUp exploit to gain system privileges on Windows 10 and 11.

The issue is related to an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.