Microsoft has identified several elevation of privilege vulnerabilities affecting Windows systems that support Virtualization Based Security (VBS), including specific Azure Virtual Machine SKUs. These vulnerabilities allow attackers with administrator privileges to replace current system files with outdated versions, potentially reintroducing previously mitigated vulnerabilities, circumventing VBS security features, and exfiltrating protected data. While Microsoft is developing security updates to address these threats, they have not yet been released. However, an opt-in revocation policy was included in the August 2024 security updates to help mitigate these risks. Administrators are advised to review KB5042562 to understand the risks and determine if the mitigation suits their environment. Additionally, a related vulnerability in Windows Update could allow an attacker with basic user privileges to achieve similar outcomes by tricking an administrator into performing a system restore. This issue is also pending a security update, and Microsoft has recommended actions to reduce risk in the interim. No known exploits have been reported, but a recent BlackHat presentation on this topic may change the threat landscape.