Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2026-26132: Windows Kernel Privilege Elevation via Authorized Access

CVE-2026-26132 · published 7 months ago
Summary

A security issue in the Windows Kernel allows a logged-in user to potentially gain elevated privileges on their local machine. This could allow an attacker to access sensitive files or systems they shouldn't be able to access. To protect your system, ensure you are running the latest Windows updates.

Original advisory text
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published10 Mar 2026
Updated30 Oct 2026
First seen11 Mar 2026
Sources
Track software like this
Free during beta