Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
CVE-2026-34334: Windows TCP/IP Elevation of Privileges Vulnerability
CVE-2026-34334 · published 5 months ago
Summary
An attacker with authorized access can exploit a weakness in Windows TCP/IP to gain elevated privileges on a local machine. This means they could perform actions that would normally require administrator permissions, potentially leading to unauthorized changes or access. To mitigate this risk, ensure that all Windows systems are updated with the latest security patches.
What to do
- Update microsoft windows_10_1607 to version 10.0.14393.9140 or later.
- Update microsoft windows_10_1809 to version 10.0.17763.8755 or later.
- Update microsoft windows_10_21h2 to version 10.0.19044.7291 or later.
- Update microsoft windows_10_22h2 to version 10.0.19045.7291 or later.
- Update microsoft windows_11_23h2 to version 10.0.22631.7079 or later.
- Update microsoft windows_11_24h2 to version 10.0.26100.8390 or later.
- Update microsoft windows_11_25h2 to version 10.0.26200.8390 or later.
- Update microsoft windows_11_26h1 to version 10.0.28000.2113 or later.
- Update microsoft windows_server_2016 to version 10.0.14393.9140 or later.
- Update microsoft windows_server_2019 to version 10.0.17763.8755 or later.
- Update microsoft windows_server_2022 to version 10.0.20348.5074 or later.
- Update microsoft windows_server_2022_23h2 to version 10.0.25398.2330 or later.
- Update microsoft windows_server_2025 to version 10.0.26100.32772 or later.
- Update microsoft windows 10 version 1607 to version 10.0.14393.9140 or later.
- Update microsoft windows 10 version 1809 to version 10.0.17763.8755 or later.
- Update microsoft windows 10 version 21h2 to version 10.0.19044.7291 or later.
- Update microsoft windows 10 version 22h2 to version 10.0.19045.7417 or later.
- Update microsoft windows 11 version 24h2 to version 10.0.26100.8457 or later.
- Update microsoft windows 11 version 25h2 to version 10.0.26200.8457 or later.
- Update microsoft windows 11 version 26h1 to version 10.0.28000.2113 or later.
- Update microsoft windows server 2012 to version 6.2.9200.26079 or later.
- Update microsoft windows server 2012 (server core installation) to version 6.2.9200.26079 or later.
- Update microsoft windows server 2012 r2 to version 6.3.9600.23181 or later.
- Update microsoft windows server 2012 r2 (server core installation) to version 6.3.9600.23181 or later.
- Update microsoft windows server 2016 to version 10.0.14393.9140 or later.
- Update microsoft windows server 2016 (server core installation) to version 10.0.14393.9140 or later.
- Update microsoft windows server 2019 to version 10.0.17763.8755 or later.
- Update microsoft windows server 2019 (server core installation) to version 10.0.17763.8755 or later.
- Update microsoft windows server 2022 to version 10.0.20348.5139 or later.
- Update microsoft windows server 2022, 23h2 edition (server core installation) to version 10.0.25398.2330 or later.
- Update microsoft windows server 2025 to version 10.0.26100.32860 or later.
- Update microsoft windows server 2025 (server core installation) to version 10.0.26100.32860 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_10_1607 |
< 10.0.14393.9140 cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* |
| microsoft | windows_10_1809 |
< 10.0.17763.8755 cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* |
| microsoft | windows_10_21h2 |
< 10.0.19044.7291 cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_10_22h2 |
< 10.0.19045.7291 cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_23h2 |
< 10.0.22631.7079 cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_24h2 |
< 10.0.26100.8390 cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_25h2 |
< 10.0.26200.8390 cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* |
| microsoft | windows_11_26h1 |
< 10.0.28000.2113 cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* |
| microsoft | windows_server_2012 |
r2 cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2016 |
< 10.0.14393.9140 cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2019 |
< 10.0.17763.8755 cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2022 |
< 10.0.20348.5074 cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2022_23h2 |
< 10.0.25398.2330 cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2025 |
< 10.0.26100.32772 cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* |
| microsoft | windows 10 version 1607 | < 10.0.14393.9140 |
| microsoft | windows 10 version 1809 | < 10.0.17763.8755 |
| microsoft | windows 10 version 21h2 | < 10.0.19044.7291 |
| microsoft | windows 10 version 22h2 | < 10.0.19045.7417 |
| microsoft | windows 11 version 23h2 |
< 10.0.22631.7079 < 10.0.22631.7219 |
| microsoft | windows 11 version 24h2 | < 10.0.26100.8457 |
| microsoft | windows 11 version 25h2 | < 10.0.26200.8457 |
| microsoft | windows 11 version 26h1 | < 10.0.28000.2113 |
| microsoft | windows server 2012 | < 6.2.9200.26079 |
| microsoft | windows server 2012 (server core installation) | < 6.2.9200.26079 |
| microsoft | windows server 2012 r2 | < 6.3.9600.23181 |
| microsoft | windows server 2012 r2 (server core installation) | < 6.3.9600.23181 |
| microsoft | windows server 2016 | < 10.0.14393.9140 |
| microsoft | windows server 2016 (server core installation) | < 10.0.14393.9140 |
| microsoft | windows server 2019 | < 10.0.17763.8755 |
| microsoft | windows server 2019 (server core installation) | < 10.0.17763.8755 |
| microsoft | windows server 2022 | < 10.0.20348.5139 |
| microsoft | windows server 2022, 23h2 edition (server core installation) | < 10.0.25398.2330 |
| microsoft | windows server 2025 | < 10.0.26100.32860 |
| microsoft | windows server 2025 (server core installation) | < 10.0.26100.32860 |
Original advisory text
Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.0
High
Type
CWE-362Race Condition
Timeline
Published12 May 2026
Updated26 Oct 2026
First seen13 May 2026
Track software like this
Free during beta