WPAD Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows when the Web Proxy Auto Discovery (WPAD) protocol falls back to a vulnerable proxy discovery process. An attacker who successfully exploited this vulnerability could bypass security and gain elevated privileges on a targeted system.

To exploit the vulnerability, an attacker could respond to NetBIOS name requests for WPAD.

The update addresses the vulnerability by correcting how Windows handles proxy discovery.