Product:
Multimedia Class Scheduler Service
Summary
Use after free in Multimedia Class Scheduler Service allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. It is crucial for users to be aware of the potential impacts of this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-60707 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By manipulating the Multimedia Class Scheduler Service, the attacker can execute arbitrary code with elevated privileges. This can allow the attacker to gain control over the system and perform unauthorized actions.
Affected Products
- Multimedia Class Scheduler Service: Affected by a use after free vulnerability that allows privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should regularly check for updates and ensure that their systems are patched against known vulnerabilities. Additionally, limiting local access to systems can help reduce the risk of exploitation.