CVE-2026-21221
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can escalate privileges, potentially gaining control over sensitive system resources.
Recommendation
Apply the security update from Microsoft for the Capability Access Management Service.
Other vulnerabilities in Capability Access Management Service
See all- CVE-2026-20830High
A race condition vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62892High
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.