Local privilege escalation via heap buffer overflow

Heap-based buffer overflow in Microsoft Windows Core Messaging allows local users to elevate privileges on affected Windows systems. Microsoft identifies the flawed component and weakness class but has not disclosed the vulnerable function, message type, or bounds-checking error. Exploitation requires existing low-privilege local access and high-complexity conditions, and successful exploitation compromises system confidentiality, integrity, and availability.