Microsoft Windows Audio Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows audio service component. The vulnerability is caused when the Microsoft Windows Audio service improperly validates permissions under specific conditions, potentially allowing script to be run with elevated privileges. Microsoft received information about this vulnerability through coordinated vulnerability disclosure. When this security bulletin was issued, Microsoft had not received any information to indicate that this vulnerability had been publicly used to attack customers. The update addresses the vulnerability by adding additional permission validations to the Microsoft Windows Audio service component.