Product:
Windows Remote Desktop
Summary
Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. It is crucial for users to be aware of the potential impacts of this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-60703 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the untrusted pointer dereference to gain elevated privileges. This requires low-level access to the system, making it a targeted attack vector for users with malicious intent. Proper access control measures should be in place to mitigate the risk of exploitation.
Affected Products
- Windows Remote Desktop: Vulnerable to untrusted pointer dereference, allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also ensure that their systems are configured with appropriate access controls to limit local access. Regular security audits and monitoring can help detect any unauthorized access attempts.