Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Windows Performance Counters Privilege Escalation Risk

CVE-2026-25165
Summary

A flaw in Windows Performance Counters could allow a legitimate user with administrative access to gain even more powerful rights on their own computer. This could happen if an attacker exploits the vulnerability, but it would not affect other users or systems. To protect against this, make sure Windows is fully updated with the latest security patches.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
microsoft windows_10_1607 <= 10.0.14393.8957
microsoft windows_10_1607 <= 10.0.14393.8957
microsoft windows_10_1809 <= 10.0.17763.8511
microsoft windows_10_1809 <= 10.0.17763.8511
microsoft windows_10_21h2 <= 10.0.19044.7058
microsoft windows_10_21h2 <= 10.0.19044.7058
microsoft windows_10_21h2 <= 10.0.19044.7058
microsoft windows_10_22h2 <= 10.0.19045.7058
microsoft windows_10_22h2 <= 10.0.19045.7058
microsoft windows_10_22h2 <= 10.0.19045.7058
microsoft windows_11_23h2 <= 10.0.22631.6783
microsoft windows_11_23h2 <= 10.0.22631.6783
microsoft windows_11_24h2 <= 10.0.26100.7979
microsoft windows_11_24h2 <= 10.0.26100.7979
microsoft windows_11_25h2 <= 10.0.26200.7979
microsoft windows_11_25h2 <= 10.0.26200.7979
microsoft windows_11_26h1 <= 10.0.28000.1719
microsoft windows_11_26h1 <= 10.0.28000.1719
microsoft windows_server_2012 All versions
microsoft windows_server_2012 r2
microsoft windows_server_2016 <= 10.0.14393.8957
microsoft windows_server_2019 <= 10.0.17763.8511
microsoft windows_server_2022 <= 10.0.20348.4830
microsoft windows_server_2022_23h2 <= 10.0.25398.2207
microsoft windows_server_2025 <= 10.0.26100.32463
Original title
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.
Original description
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.
nvd CVSS3.1 7.8
Vulnerability type
CWE-476 NULL Pointer Dereference
Published: 10 Mar 2026 · Updated: 14 Mar 2026 · First seen: 11 Mar 2026