ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability
ZDI disclosed an unpatched local privilege escalation flaw (CVSS 5.3) in Microsoft Windows HTTP Proxy, requiring prior low-privileged code execution.
ZDI-26-708 details a privilege escalation vulnerability in the Microsoft Windows HTTP Proxy component. A local attacker who can already execute low-privileged code on the target system can escalate privileges. ZDI assigned a CVSS rating of 5.3 and published it as a 0day advisory; no CVE id is listed in the bulletin text.
50