CVE Catalog
CVE-2026-40369
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk4.73%
91th percentile - higher than 91% of all known CVEs
Summary
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with limited privileges can gain full control over the system, leading to compromise of data confidentiality, integrity, and availability.
Recommendation
Apply the security update released by the vendor for the Windows Kernel immediately.
Original NVD description (English source)
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.