CVE-2026-103568
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install security updates for Windows Credential Providers.
Other vulnerabilities in Windows Credential Providers
See all- CVE-2026-69814High
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69790High
A heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69729High
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS