Multiple Privilege Escalation Vulnerabilities in Microsoft Authenticator and Xbox Gaming Services

Microsoft has disclosed multiple security vulnerabilities affecting Microsoft Authenticator and Microsoft Xbox Gaming Services on Windows. These flaws, identified as CVE-2024-38063 and CVE-2024-38060, allow a local, authenticated attacker to perform privilege escalation. By successfully exploiting these vulnerabilities, an attacker with low-privileged access to a system can elevate their permissions, potentially gaining administrative access. These issues pose a significant risk to organizational security, as they facilitate lateral movement or deeper system compromise following an initial access event. Defenders should prioritize patching all systems running these Microsoft applications to the latest available security updates to mitigate the risk of local exploitation.

Impact

Successful exploitation of these vulnerabilities allows a local attacker to escalate privileges on Windows 10 and Windows 11 systems. This could lead to full system compromise, unauthorized access to sensitive data, and persistence establishment. Organizations utilizing these services on endpoint devices are at risk if an attacker has already gained initial local access to the machine.

Recommendation

Prioritize the immediate application of security patches provided by Microsoft for all affected installations of Authenticator and Xbox Gaming Services to remediate CVE-2024-38063 and CVE-2024-38060. Verify that automated update mechanisms for these components are functioning as expected across the environment.