Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61785)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server. The vulnerability stems from the failure of the Windows State Repository service to properly handle objects in memory, and can be exploited by an attacker running a specially crafted application to run arbitrary code in a privileged environment.