ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Affected Microsoft Windows installations are exposed when an attacker can already execute low-privileged code locally on the system. It is a local privilege-escalation issue, so the provided information does not indicate exploitation directly from a remote, unauthenticated position.
What must an attacker have before exploiting it?
The attacker must first be able to execute code with low privileges on the target Windows system. The provided information does not identify any additional prerequisites or required configuration.