Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68742)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a failure of the Shell infrastructure component to properly handle objects in memory, and could be exploited by an attacker running a specially crafted application to run processes in a privileged environment.