CVE-2026-24289

HighCVSS 7.8

Published: 10/03/2026(UTC)Updated: 19/06/2026(UTC)Translated: 20/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.49%

90th percentile - higher than 90% of all known CVEs

Summary

A use after free vulnerability in the Windows Kernel allows an authorized attacker to locally elevate privileges.

Risk Assessment

An attacker with appropriate permissions can exploit this vulnerability to gain higher privileges in the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.