An authorized attacker who can access Microsoft PC Manager can exploit a flaw in the application's link resolution before accessing files, known as "link following", to elevate privileges locally. This vulnerability allows the attacker to bypass normal security checks and gain higher level permissions, constituting a local privilege escalation. The weakness is a lack of proper authentication checks for privileged operations, as identified by CWE‑306.

Microsoft PC Manager is the affected product. Specific affected version information is not listed in the advisory, so all installations at risk should be considered vulnerable until a patch is applied.

The vulnerability carries a CVSS score of 7.8, indicating high severity. No EPSS score is provided, and it is not included in the CISA KEV catalog, suggesting limited publicly known exploitation. The attack vector is local; an attacker with authorized access to PC Manager can exploit the improper link resolution before file access to elevate privileges. The risk remains significant for systems that have not applied a fix.