Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Windows User Interface Core Privilege Escalation Risk

CVE-2026-27911
Summary

An attacker with authorized access to a Windows system can potentially exploit a flaw in the Windows User Interface Core to gain elevated privileges, which could allow them to make unauthorized changes to the system. This is a concern for organizations that rely on Windows systems, as it could enable an attacker to gain a higher level of access than intended. To protect against this risk, ensure that all Windows systems are kept up to date with the latest security patches and updates.

Original title
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
Original description
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
nvd CVSS3.1 7.8
Vulnerability type
CWE-362 Race Condition
CWE-416 Use After Free
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026