CVE-2026-40377
HighSummary
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions may gain elevated privileges on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor system logs for unauthorized activities.
Other vulnerabilities in Windows Cryptographic Services
See all- CVE-2026-50681Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50352Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50302Medium
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-44806Medium
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-44810High
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
- CVE-2024-30096Medium
A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.
- CVE-2023-36907Medium
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-36906Medium
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Original NVD description (English source)
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.