CVE-2026-108134
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A use-after-free vulnerability in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the flaw to gain elevated privileges and take control of the system.
Recommendation
Apply Windows security updates.
Other vulnerabilities in Windows Autopilot
See all- CVE-2026-96215High
A race condition vulnerability in Windows Autopilot arises from improper synchronization when accessing a shared resource. An authenticated attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-73004Medium
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
- CVE-2026-65783High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65782High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65781High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65780High
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65779High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65778High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS