CVE-2025-24994: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

How could an attacker exploit this vulnerability?

To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then trigger an event that could exploit the vulnerability and save an invalid state to a database or trigger other unintended actions.